Privacy policy

Data controller

The data controller is [TO COMPLETE: registered name], whose details appear in the legal notice.

For any question about your data: hello@dematgames.com.

What we collect and why

We only collect what the services you use require. No data is sold or rented.

• Submit-your-game form: name, email address, game name, link to the game, platform, message. Purpose: to review your proposal and reply. Legal basis: legitimate interest (handling a request you send us). Retention: three years from last contact.
• Optional qualification (project stage, expected volume, edition format, team size). Purpose: preparing our reply. Legal basis: legitimate interest. Retention: as above.
• Opening alert: email address only. Purpose: telling you when the shop opens. Legal basis: consent. Retention: until opening, or until you ask to be removed.
• User account (Google sign-in): email address, name, Google profile picture, member number. Purpose: identification and account access. Legal basis: performance of the contract. Retention: for the lifetime of the account.
• IP address: held in memory for at most one hour, solely to rate-limit form submissions. Purpose: security. Legal basis: legitimate interest. It is never written to a database or cross-referenced.

Storage in your browser

The site uses your browser's local storage to remember your basket, your language and your session. This stays on your device and is never sent to us.

This storage is strictly necessary to deliver the service you asked for, and therefore does not require prior consent (article 82 of the French Data Protection Act; CNIL decision no. 2020-091).

The site uses no advertising trackers, no analytics tools and no third-party cookies. That is why you are not shown a consent banner.

Recipients and processors

Your data is accessible to our team and to the following technical providers, acting as processors:

• Google Ireland Limited (Firebase) — authentication and database. Data hosted in the European Union.
• Vercel Inc. — site hosting. Transfers outside the EU are covered by the European Commission's standard contractual clauses.
• Cloudinary Ltd. — image hosting. No personal data is stored there.

Your rights

You have the right to access, rectify, erase, restrict, object to and port your data. Where processing relies on consent, you can withdraw it at any time.

To exercise these rights, write to hello@dematgames.com. We reply within one month.

If you believe your rights are not being respected, you can lodge a complaint with the CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — or with your local supervisory authority.

Security

Traffic to and from the site is encrypted (HTTPS). Access to the administration area is restricted and verified server-side on every request.