Privacy Policy

Last updated: July 2026

1. Data controller

The controller for the processing of personal data is FAMONDO (Franck Petretto, entrepreneur individuel (EI)).
DPO contact: contact@famondo.com

2. Data collected

We collect the following data:

  • Contact form: name, email address, subject, message
  • Newsletter: email address, timestamped consent
  • Pre-orders: payment data processed by Stripe (we do not store card numbers), email address, name
  • Technical cookies: website operation and payment session

2.bis Data collected via the Mobile App

Use of Facebook Login

As part of the use of our mobile app, we support authentication via Facebook Login.

  • Data collected via Facebook: When you log in, we request access to your public profile (first and last name) and email address to create your player account.

Deletion of user data (Facebook Data Deletion)

In accordance with Meta's rules, you may request the deletion of your game account data associated with Facebook at any time. To do so:

  1. Go to your Facebook account settings, in the "Apps and Websites" section.
  2. Find the Famondo app and click "Remove".
  3. To permanently delete your FAMONDO game account and all associated data (including game history), open the app and go to Settings → Delete my account (deletion is immediate); without access to the app, email contact@famondo.com (processed within 48 hours). Full details: account deletion page.

    4. Other account sign-in methods

    You can also create or link your player account via Google or Apple (Sign in with Apple). In that case we only receive the information required to create your account: sign-in identifier, display name and, depending on the provider chosen, email address.

    Advertising and advertising identifier

    The app displays rewarded ads provided by Google AdMob, in exchange for which you receive an in-game reward (Mondos, XP…). Your device may then share with Google and its certified advertising partners an advertising identifier (IDFA on iOS, Android advertising ID) as well as technical data (device model, IP address, session data).

    • Accounts under 13: no advertising identifier is collected; only non-personalised ads are served.
    • Accounts 13 and over: whether personalised ads are served depends on your consent, collected via a certified Consent Management Platform (CMP), which you can change at any time from Settings → Privacy settings in the app.
    • iOS: cross-app tracking (App Tracking Transparency) is subject to a separate authorization requested by the operating system, never for an account under 13.

    The full list of certified advertising partners is available from the consent message displayed in the app.

    In-app purchases

    The app offers in-app purchases (virtual currency packs — "Mondos" —, Premium subscription), processed exclusively by Apple (App Store) or Google (Google Play): we never receive or store any card payment data, only the purchase confirmation (product, status, transaction identifier).

    Notifications, diagnostics and usage statistics

    • Notifications: if you allow them, a notification token (Firebase Cloud Messaging) is used to inform you of game-related events (victory, mission, daily gift…).
    • Technical diagnostics: in the event of an error or crash, a technical report (Sentry) is generated so we can fix the issue; it never contains payment data.
    • Usage statistics: we collect usage events (action performed, platform, app version, session identifier) to improve the game.
    • Device identifier: a locally generated identifier lets your game work as a guest player, before any permanent account is created.

    Protection of minors' data

    Famondo is aimed at a family audience, including players under 13. For these accounts, no exact date of birth is ever stored, no advertising identifier is collected, and only non-personalised ads are served to them. Date of birth is only requested from age 13 onward, solely to grant an in-game birthday gift.

3. Purposes of processing

  • Processing pre-orders and order management
  • Responding to contact requests
  • Serving rewarded ads and managing your advertising consent
  • Managing in-app purchases and subscriptions
  • Sending game-related notifications (if authorized)
  • Technical diagnostics and game improvement
  • Sending newsletters (with explicit consent)

4. Legal basis

  • Performance of a contract: processing of pre-orders
  • Explicit consent: newsletter
  • Consent: personalised ads and advertising identifier, collected via the consent management platform built into the app
  • Performance of a contract: managing in-app purchases and subscriptions
  • Legitimate interest: technical diagnostics, security, game improvement and non-personalised ads
  • Legitimate interest: responding to contact requests

5. Retention period

  • Order data: 10 years (accounting obligations)
  • Newsletter: until unsubscription + 3 years
  • Player account and game progress: retained while the account is active, deleted on request (see account deletion page)
  • In-app purchase history: 10 years (accounting obligations)
  • Usage statistics: archived after 90 days, retained for as long as needed to improve the game
  • Advertising consent: stored on your device until you change your choice
  • Contact: 3 years after the last exchange

6. Data recipients

Your data may be shared with:

  • Stripe (USA) — payment processing (Privacy Shield / standard contractual clauses)
  • Brevo (Sendinblue) (EU) — sending transactional emails and newsletters
  • Google (USA) — authentication (Google Sign-In), serving rewarded ads (AdMob), sending push notifications (Firebase Cloud Messaging) and processing in-app purchases on Android (Google Play)
  • Apple (USA/Ireland) — authentication (Sign in with Apple) and processing in-app purchases on iOS (App Store)
  • Discord Inc. (USA) — authentication, if you choose this sign-in method
  • Sentry (USA) — technical diagnostics of app errors and crashes
  • Supabase (EU) — secure database

7. Your rights

In accordance with the GDPR, you have the following rights over your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw your consent at any time

To exercise your rights, contact us at contact@famondo.com. You may also lodge a complaint with the CNIL (French Data Protection Authority).

8. Cookies

We use only cookies strictly necessary for the operation of the website and for securing payment sessions. No analytics or advertising cookies are used.

8.bis Advertising and managing your choices in the Mobile App

Unlike the website, some advertising processing in the Mobile App relies on your consent. This consent is collected via an IAB TCF-certified Consent Management Platform (CMP), GDPR-compliant, the first time a rewarded ad is requested.

You can view, change or withdraw your advertising consent at any time from Settings → Privacy settings in the app, or via the "List of partners" link shown in the consent message.

If you live in certain US states, you also have the right to opt out of the sale or sharing of your data ("Do Not Sell or Share My Personal Information"), accessible in the same place.

9. Security

We implement appropriate technical and organizational measures to protect your data (HTTPS encryption, restricted access, ISO 27001-certified hosting).