Your data, explained simply
Galipon uses your progress and some technical information to run the game, recover your stars and protect the services against abuse. On Android, you can play with a guest profile without providing your name or email address. Linking an email address is optional and lets you recover your progress on another installation.
On Android, Galipon offers optional rewarded ads through Google AdMob and a Premium purchase through Google Play. Availability depends on the version, country and test settings. To verify, restore or revoke Premium access, our server processes the product ID, Google purchase proof, its status and its association with the profile. Purchase proof is stored encrypted on our server. Google handles payment; Galipon does not receive your bank or card details.
Who is responsible?
Amaury ROBERT, a sole trader, is the controller of the processing carried out for Galipon. Business address: CDV 199187 - 350 Chemin de pré neuf, 38350 LA MURE, France. For questions or requests about your data: contact@galipon.com. The legal notice also identifies the publisher and hosting provider.
Data needed to play
- Profile, progress and leaderboards: player ID, nickname, completed levels, stars, best times, attempt statistics, lives and refill times. This data supports saving, synchronisation and leaderboards. Other players can see your nickname and published records in leaderboards, but not your email address. Avoid including personal information in your nickname.
- Profile access: technical session and installation identifiers, authentication proofs and pending operations. They allow your device to retrieve the correct profile and prevent the same action from being counted more than once.
- Optional email account: the address provided, temporary code request and confirmation of linking or recovery. The server does not store the login code in plain text. The address is used to send requested codes and recover the account; it is not sent to AdMob to display ads.
- Security: IP address during connections, technical request information and counters limiting calls and code requests. This information helps prevent abuse and diagnose errors.
This processing is based on performance of the requested service for gameplay, saving and authentication, and on the publisher’s legitimate interest in securing the services and preventing fraud. Optional information is not required to play as a guest. Without prior linking, we cannot guarantee profile recovery if device data is lost.
On your device and on the website
The game stores progress, settings and actions awaiting synchronisation locally. On Android, server access credentials are protected by the application’s encrypted storage. Clearing app data removes this local information but does not request deletion of the server account. The local Windows version stores progress on the computer and does not use this mobile advertising flow.
On the website, your manual language choice is remembered for one year in the galipon_language cookie. Your preference to pause animations remains in the browser’s local storage until changed or deleted. You can clear these preferences in your browser settings.
Optional ads and privacy choices
When you have no lives left, you can watch an ad for one life or wait for a natural refill. Ads require Internet access and are not always available. When the SDK confirms a reward, the game sends an identified operation to our server to credit the life only once. This operation does not send your Galipon account email or detailed progress to Google. Devices and versions configured for testing receive test ads.
The game asks for your age with no preselected answer during initial setup or before the first ad if this information is missing. The declared age is stored in the device settings and is not sent to the Galipon server. Protection settings appropriate to the age group are sent to the advertising SDK. No ad is requested without a declared age. Google UMP then checks the privacy choices required before ads load. You can accept, refuse or change the consents offered. Refusal does not delete your progress or prevent you from waiting for lives to refill. When Google makes them available, options can be accessed under “Advertising privacy” in the settings.
Google AdMob and Google UMP may process IP addresses, approximate location derived from them, app and ad interactions, diagnostics, device or account identifiers and privacy choices to deliver and measure ads, analyse performance and prevent fraud. The Android version includes permission to access the advertising ID; its use and personalisation depend on age protections, consent and Google’s rules. Non-personalised ads may also require technical data. Network communications are encrypted in transit.
Advertising processing subject to consent must start only after the required choice. Other strictly necessary technical or fraud-prevention processing depends on the legal bases stated in the provider’s message and documentation. See Google’s privacy policy and how Google uses data from its partners for their purposes, recipients, retention periods and safeguards.
Children and parents
Galipon is intended for players aged 6 and over, including children. In the current Android version, under-16s are flagged to the SDK for child treatment and to UMP as under the age of consent; 16–17-year-olds receive teen treatment. Ad content is limited to Google’s G category below age 13 and PG from age 13. Adults remain subject to their consent choices. There is no encouragement to declare an older age.
Parents or legal representatives: help your child with privacy choices, optional progress linking and purchases. Use an email address you are authorised to manage and Google Play parental controls for payments. You can contact us for information or to request deletion of your child’s data, subject to proportionate verification of your authority and the relevant profile.
Who can receive this data?
Data is accessible to the publisher and the providers needed to operate the service, within their assigned roles: OVHcloud hosting, code delivery through OVH email, Google Play for purchases and verification, and Google AdMob/UMP for ads and privacy choices. Other players can view published nicknames and records. Providing an email address does not subscribe you to a newsletter, and Galipon does not share its account database with the advertising provider.
Google may process some data in countries outside the European Economic Area, under the mechanisms described in its data transfer documentation. You can review these safeguards and ask us about the providers used by Galipon.
How long is data retained?
- The profile, nickname, progress, stars, lives, best records and email linking are retained to maintain the service until deletion. Purchase proof and status data are used to verify Premium access. Their association with the profile is removed when the account is deleted, and proof is deleted from our server when no profile remains linked to it. Google retains its own purchase data under its rules.
- Detailed operation and attempt histories are purged after thirty days from creation or last activity, depending on their nature. The proof supporting the currently displayed best record is retained with that record. Totals by day and level, without a profile identifier, may be retained.
- An email code expires after ten minutes. Technical data about its request is purged after twenty-four hours.
- Ad reward operations are retained for thirty days to track processing; a technical counter prevents old operations from being repeated after this purge. A technical deletion receipt, without email or progress, expires after thirty days to acknowledge repeated requests. Google’s own retention periods are set out in its privacy information.
- Sessions expire and are cleaned up. Security counters are temporary and expire with their rate-limiting window. Operational logs and backups have separate retention cycles; information kept to resolve an incident or request is retained for the time needed to handle it and, where relevant, meet applicable obligations.
Technical deletions run periodically, not at the exact second of expiry. Erasure requests are applied to active data; backups follow their replacement cycle and are not used to reactivate a deleted profile.
Your rights and requests
Subject to the conditions laid down by law, you can request access, rectification, erasure, restriction or portability of your data, or object to certain processing. You can withdraw consent without affecting processing previously carried out on that basis. Write to contact@galipon.com, specifying your request. Never send your login code. We may ask for the information strictly needed to locate the profile and verify that the request is authorised.
You can delete your profile under “Settings → My account → Delete my account”, after confirmation, or follow the account deletion request procedure at https://galipon.com/en/supprimer-compte/. Deletion removes the email account, nickname, progress, leaderboard records and associated access. It is irreversible and does not refund or cancel a Google Play purchase: Google continues to manage purchases, and a still-valid purchase can be restored. You can also lodge a complaint with the CNIL.
Additional information for iOS
On iOS, the guest profile, optional email linking and AdMob/UMP use the age and consent safeguards described above. Server credentials and data awaiting synchronisation are protected in the iOS Keychain, without iCloud synchronisation, and may survive uninstalling. Access to the advertising identifier requires Apple's tracking permission.
Apple handles Premium payments. We verify signed transactions and retain the original transaction ID encrypted, its status and its association with the profile. Account deletion removes this association; it does not delete or refund the Apple purchase. Apple sets its own retention periods and international transfer safeguards: see Apple's privacy policy. Parents can restrict purchases using Apple's parental controls.
Changes to this page
This policy will evolve with Galipon releases. You will be informed of significant changes in how data is used, and new choices will be requested where necessary.