1. Data controller

The controller for the processing of personal data is {{company}} ({{legalName}}), {{address}}.
DPO contact: {{email}}

2. Data collected

We collect the following data:

Contact form: name, email address, subject, message
Newsletter: email address, timestamped consent
Pre-orders: payment data processed by Stripe (we do not store card numbers), email address, name
Technical cookies: website operation and payment session

2.bis Data collected via the Mobile App

Use of Facebook Login

As part of the use of our mobile app, we support authentication via Facebook Login.

Data collected via Facebook: When you log in, we request access to your public profile (first and last name) and email address to create your player account.

Deletion of user data (Facebook Data Deletion)

In accordance with Meta's rules, you may request the deletion of your game account data associated with Facebook at any time. To do so:

Go to your Facebook account settings, in the "Apps and Websites" section.
Find the Famondo app and click "Remove".
To permanently delete your FAMONDO game account and all associated data (including game history), open the app and go to Settings → Delete my account (deletion is immediate); without access to the app, email contact@famondo.com (processed within 48 hours). Full details: account deletion page.

Other account sign-in methods

You can also create or link your player account via Google or Apple (Sign in with Apple). In that case we only receive the information required to create your account: sign-in identifier, display name and, depending on the provider chosen, email address.

Advertising and advertising identifier

The app displays rewarded ads provided by Google AdMob, in exchange for which you receive an in-game reward (Mondos, XP…). Your device may then share with Google and its certified advertising partners an advertising identifier (IDFA on iOS, Android advertising ID) as well as technical data (device model, IP address, session data).

Accounts under 13: no advertising identifier is collected; only non-personalised ads are served.
Accounts 13 and over: whether personalised ads are served depends on your consent, collected via a certified Consent Management Platform (CMP), which you can change at any time from Settings → Privacy settings in the app.
iOS: cross-app tracking (App Tracking Transparency) is subject to a separate authorization requested by the operating system, never for an account under 13.

The full list of certified advertising partners is available from the consent message displayed in the app.

In-app purchases

The app offers in-app purchases (virtual currency packs — "Mondos" —, Premium subscription), processed exclusively by Apple (App Store) or Google (Google Play): we never receive or store any card payment data, only the purchase confirmation (product, status, transaction identifier).

Notifications, diagnostics and usage statistics

Notifications: if you allow them, a notification token (Firebase Cloud Messaging) is used to inform you of game-related events (victory, mission, daily gift…).
Technical diagnostics: in the event of an error or crash, a technical report (Sentry) is generated so we can fix the issue; it never contains payment data.
Usage statistics: we collect usage events (action performed, platform, app version, session identifier) to improve the game.
Device identifier: a locally generated identifier lets your game work as a guest player, before any permanent account is created.

Protection of minors' data

Famondo is aimed at a family audience, including players under 13. For these accounts, no exact date of birth is ever stored, no advertising identifier is collected, and only non-personalised ads are served to them. Date of birth is only requested from age 13 onward, solely to grant an in-game birthday gift.

3. Purposes of processing

Processing pre-orders and order management
Responding to contact requests
Serving rewarded ads and managing your advertising consent
Managing in-app purchases and subscriptions
Sending game-related notifications (if authorized)
Technical diagnostics and game improvement
Sending newsletters (with explicit consent)

4. Legal basis

Performance of a contract: processing of pre-orders
Explicit consent: newsletter
Consent: personalised ads and advertising identifier, collected via the consent management platform built into the app
Performance of a contract: managing in-app purchases and subscriptions
Legitimate interest: technical diagnostics, security, game improvement and non-personalised ads
Legitimate interest: responding to contact requests

5. Retention period

Order data: 10 years (accounting obligations)
Newsletter: until unsubscription + 3 years
Player account and game progress: retained while the account is active, deleted on request (see account deletion page)
In-app purchase history: 10 years (accounting obligations)
Usage statistics: archived after 90 days, retained for as long as needed to improve the game
Advertising consent: stored on your device until you change your choice
Contact: 3 years after the last exchange

6. Data recipients

Your data may be shared with:

Stripe (USA) — payment processing (Privacy Shield / standard contractual clauses)
Brevo (Sendinblue) (EU) — sending transactional emails and newsletters
Google (USA) — authentication (Google Sign-In), serving rewarded ads (AdMob), sending push notifications (Firebase Cloud Messaging) and processing in-app purchases on Android (Google Play)
Apple (USA/Ireland) — authentication (Sign in with Apple) and processing in-app purchases on iOS (App Store)
Discord Inc. (USA) — authentication, if you choose this sign-in method
Sentry (USA) — technical diagnostics of app errors and crashes
Supabase (EU) — secure database

7. Your rights

In accordance with the GDPR, you have the following rights over your personal data:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to withdraw your consent at any time

To exercise your rights, contact us at {{email}}. You may also lodge a complaint with the CNIL (French Data Protection Authority).

8. Cookies

We use only cookies strictly necessary for the operation of the website and for securing payment sessions. No analytics or advertising cookies are used.

8.bis Advertising and managing your choices in the Mobile App

Unlike the website, some advertising processing in the Mobile App relies on your consent. This consent is collected via an IAB TCF-certified Consent Management Platform (CMP), GDPR-compliant, the first time a rewarded ad is requested.

You can view, change or withdraw your advertising consent at any time from Settings → Privacy settings in the app, or via the "List of partners" link shown in the consent message.

If you live in certain US states, you also have the right to opt out of the sale or sharing of your data ("Do Not Sell or Share My Personal Information"), accessible in the same place.

9. Security

We implement appropriate technical and organizational measures to protect your data (HTTPS encryption, restricted access, ISO 27001-certified hosting).

Play FAMONDO on mobile