Privacy policy

Data controller

Florian Augeard (PrograGames), 49000 Angers, France — contact@progragames.com.

What the game stores

• Guest account: a random device identifier (kept in your browser and on the server, it lets you get your guest account back), an automatic username (G-…) and a hashed fingerprint of your IP address, used only to limit mass creation of guest accounts.
• Registered account: username, email address, password (hashed, never stored in plain text), email verification, date of last login.
• Game: scores, level, experience, coins, energy, unlocked games, challenges, quests, streaks, medals, daily run, your Quicky’s look, chosen theme and effect, tutorials already seen.
• Social: friends, friend requests, and your promotion link if you add one.
• Purchases: the Stripe payment reference and the product bought. We never see your card number.
• Technical logs: the server temporarily records the IP address, time and browser of requests (security, diagnostics); versus match results may appear in them.
• Audience measurement: Level Farm’s in-house measurement receives the page viewed, the site, the referring host and any campaign code (?ref, utm). It uses no cookie and no storage on your device, keeps no IP address and honours “Do Not Track” and GPC signals.

Why

• To run the game, your account, your progress, the leaderboards and friends (performance of the service you use).
• To process your purchases (performance of the contract, accounting obligations).
• To send you the emails you need: address verification, password reset. No newsletter.
• To protect the game against cheating and abuse (legitimate interest).
• To measure audience anonymously and improve the game (legitimate interest).

No advertising, no selling of data.

What other players see

Your username, your Quicky’s look, your level, your scores and your promotion link appear on the leaderboards, the daily run and versus. Your friends also see your coins, the number of unlocked games and your records.

Service providers

• Scaleway (France): hosting of the site, the game and the database.
• Stripe (Stripe Payments Europe, Ireland): card payments. Stripe receives your player identifier and the product bought; transfers outside the European Union may occur, covered by the safeguards provided by the GDPR.
• Mailjet: sending of verification and password reset emails.
• Level Farm (same publisher): the audience measurement described above.

Cookies and browser storage

Quicky Game uses no cookies. Your browser only keeps what the game needs: your session, the guest account’s device identifier, language, sound, theme, the drawing of your Quicky for the loading screen and the tutorials already seen. None of it is used for advertising or tracking, which is why no consent is requested. Clearing the site’s data erases this information (a guest account is then lost: create an account to keep it).

Retention periods

• Account and game data: as long as the account exists; deleted on request.
• Game sessions: one day. Password reset link: one hour.
• Payment references: for the duration of accounting obligations (10 years).
• Audience measurement: 400 days at most. Technical logs: 14 days for the web server, 30 days for the application.

Your rights

You can ask for access to your data, its correction, erasure or portability, the restriction of processing, or object to it. The game does not have a delete-account button yet: write to contact@progragames.com with your username (and the account’s email if there is one), and your account will be deleted along with its data. You can also contact the French data protection authority, the CNIL (cnil.fr), or your local authority.

Under 15

If you are under 15, ask a parent for permission before creating an account with your email address. Purchases require a payment method: they must be made with a parent’s permission.

Security

Encrypted connection (HTTPS), hashed passwords, time-limited sessions invalidated when the password changes, database access restricted to the server.