Your data, explained simply
Galipon uses your progress and some technical information to run the game, recover your stars and protect the services against abuse. On Android, you can play with a guest profile without providing your name or email address. Linking an email address is optional and lets you recover your progress on another installation.
The Android version currently being tested offers demonstration ads only. Premium purchases and commercial advertising are not yet enabled. This page describes the available services and the test advertising flow; it will be updated as these features evolve.
Who is responsible?
Amaury ROBERT, a sole trader, is the controller of the processing carried out for Galipon. Business address: CDV 199187 - 350 Chemin de pré neuf, 38350 LA MURE, France. For questions or requests about your data: contact@galipon.com. The legal notice also identifies the publisher and hosting provider.
Data needed to play
- Profile and progress: service-generated player ID, completed levels, stars, best times and attempt statistics, number of lives and refill times. This data enables saving, synchronisation and the lives reserve to work.
- Profile access: technical session and installation identifiers, authentication proofs and pending operations. They allow your device to retrieve the correct profile and prevent the same action from being counted more than once.
- Optional email account: the address provided, temporary code request and confirmation of linking or recovery. The server does not store the login code in plain text. The address is used to send requested codes and recover the account; it is not sent to AdMob to display ads.
- Security: IP address during connections, technical request information and counters limiting calls and code requests. This information helps prevent abuse and diagnose errors.
This processing is based on performance of the requested service for gameplay, saving and authentication, and on the publisher’s legitimate interest in securing the services and preventing fraud. Optional information is not required to play as a guest. Without prior linking, we cannot guarantee profile recovery if device data is lost.
On your device and on the website
The game stores progress, settings and actions awaiting synchronisation locally. On Android, server access credentials are protected by the application’s encrypted storage. Clearing app data removes this local information but does not request deletion of the server account. The local Windows version stores progress on the computer and does not use this mobile advertising flow.
On the website, your manual language choice is remembered for one year in the galipon_language cookie. Your preference to pause animations remains in the browser’s local storage until changed or deleted. You can clear these preferences in your browser settings.
Optional ads and privacy choices
When you have no lives left, the Android test flow offers an ad in exchange for one life. You can choose to wait for a refill. Ads require an Internet connection. Reward verification uses a temporary ticket ID; it does not require sharing your email address, name or detailed progress with Google.
Before preparing an ad, the game asks for an age with no preselected answer. You can continue without answering. Only a category remains on the device; the age entered is neither retained nor sent to the Galipon server. Google UMP then checks whether privacy choices must be presented before ads load. Where consent is required, you can accept, refuse or change it using the options provided. Refusal does not delete your progress or prevent you from waiting for lives to refill. Available options can be found under “Advertising privacy” in the game settings.
The Android adapter uses Google AdMob and Google UMP. Depending on applicable settings and choices, their services process information such as IP addresses, ad interactions, diagnostic information, technical identifiers and privacy preferences. Non-personalised advertising therefore does not mean no data processing. In this test version, ads are requested without personalisation and the Android permission to read the advertising ID is removed.
Advertising processing subject to consent must start only after the required choice. Other strictly necessary technical or fraud-prevention processing depends on the legal bases stated in the provider’s message and documentation. See Google’s privacy policy and how Google uses data from its partners for their purposes, recipients, retention periods and safeguards.
Children and parents
Galipon is intended for all ages. In the test advertising flow, under-18s and people who do not provide their age receive enhanced protections: requests for ads suitable for all audiences, child-directed treatment signalling and no personalisation. There is no encouragement to declare an older age.
Parents or legal representatives: help your child with privacy choices and any linking of their progress. Use an email address you are authorised to manage. You can contact us for information or to request deletion of your child’s data, subject to proportionate verification of your authority and the relevant profile. Parental requirements and applicable settings will be checked for each territory before public ad delivery.
Who can receive this data?
Game data is accessible to the publisher and providers needed to run the service, within their assigned roles: OVHcloud hosting, code delivery through OVH email and, when an advertising flow is used, Google AdMob/UMP services. Providing an email address does not subscribe you to a newsletter. Galipon does not share its account database with the advertising provider.
Google may process some data in countries outside the European Economic Area, under the mechanisms described in its data transfer documentation. You can review these safeguards and ask us about the providers used by Galipon.
How long is data retained?
- Progress, stars, the lives reserve and email linking are retained to maintain and retrieve the profile until it is deleted. Profiles are not automatically deleted alongside technical histories.
- Detailed operation and attempt histories are purged after thirty days from creation or last activity, depending on their nature. Totals by day and level, without a profile identifier, may be retained.
- An email code expires after ten minutes. Technical data about its request is purged after twenty-four hours.
- An advertising ticket expires after thirty minutes; its history is purged after thirty days. Google’s own retention periods are set out in its privacy information.
- Sessions expire and are cleaned up. Security counters are temporary and expire with their rate-limiting window. Operational logs and backups have separate retention cycles; information kept to resolve an incident or request is retained for the time needed to handle it and, where relevant, meet applicable obligations.
Technical deletions run periodically, not at the exact second of expiry. Erasure requests are applied to active data; backups follow their replacement cycle and are not used to reactivate a deleted profile.
Your rights and requests
Subject to the conditions laid down by law, you can request access, rectification, erasure, restriction or portability of your data, or object to certain processing. You can withdraw consent without affecting processing previously carried out on that basis. Write to contact@galipon.com, specifying your request. Never send your login code. We may ask for the information strictly needed to locate the profile and verify that the request is authorised.
An account deletion button is not yet available in the test version: requests must be sent to this contact. Deleting server-side progress may prevent its recovery. You can also lodge a complaint with the CNIL.
Changes to this page
This policy will evolve with Galipon releases. You will be informed of significant changes in how data is used, and new choices will be requested where necessary.