Privacy

The trademark

“Lougawou” is a trademark of Angelinsight SAS, which publishes this site, the game, the app and the universe. The visuals, texts and music shown here are protected.

Who handles your data

The data controller is Angelinsight SAS, a simplified joint-stock company with a share capital of 1,000 euros, registered with the Paris trade and companies register under number 940 148 448, with its registered office at 9 rue des Colonnes, 75002 Paris.

We have not appointed a data protection officer. For any question about your data, and to exercise your rights, write to contact@lougawou.app: we read that address.

What we collect

We collect little, and never just in case.

The register. The email address you leave to know when the game arrives, on the site or from your account. If your account was opened through Google or Apple, they are the ones who passed that address on to us, and nothing else.

Your contribution. If you support the project, your first name and your address, as the payment passes them on to us, the support level you chose and the amount. We never see your card number.

Your account. Your address, verified by a code or through Google or Apple. Your first name, required, because it is the name you carry in games. Your surname, optional. Gender, optional: it only serves to choose your illustrations in the game, never to write to you. Your role cards, your gifts, and the code you enter. Without a first name you would have no name in games; without a surname or gender, nothing changes for you.

Your age declaration. When you create your account, you declare that you are at least 15, or that a parent agrees. We keep that declaration and its date. We ask for no identity document, and we check nothing else.

Your sign-in. The IP address and the browser you sign in from: the service that opens your session records them with it, so that your account stays yours.

Your games. The name you give in order to play, and what it takes for the game to run. A section below is about them.

If you withdraw from your contribution. The declaration you fill in, your name and first name, the contribution concerned and the address where the acknowledgement should go, together with the timestamped acknowledgement we send you. That is the proof the law requires us to keep.

If you report content to us. Your name and email address, with what you are reporting, so that we can look into it, acknowledge it and tell you what we decided. We do this under our obligations as a publisher and our legitimate interest in keeping the game clean. Kept for five years.

Nothing else. No phone number, no advertising, no profiling, no data ever sold. No decision about you is made by a machine alone.

What we do with it, and on what basis

Writing to you when the game arrives, and for the big news of the universe (single, anime, card game), if you asked us to by leaving your address: your consent. Every message carries an unsubscribe link, and you withdraw your consent whenever you want.

Fulfilling your contribution: the confirmation, the unlock code, the receipt, a refund, the answer to a withdrawal request. This is the performance of our contract with you. Those emails go out in all cases, even if you have left the register: they are your due, not communication.

Sending project news to the people who contributed: our legitimate interest in keeping the relationship with those who made the project possible. You may object at any time through the unsubscribe link.

Running your account, recognising you, handing over your role cards: the performance of our contract, under the terms of use.

Running a game, and showing you there under the name you chose: our legitimate interest in running the game that you and the host asked for. See the next section.

Keeping your account yours: the IP address and the browser of your sign-ins serve that, and nothing else. This is our legitimate interest in the security of our services, which the GDPR expressly recognises: ensuring network and information security “constitutes a legitimate interest of the data controller concerned” (recital 49).

Knowing that you may open this account: your age declaration serves that. This is the performance of our contract with you, and the proof that we asked what we had to ask.

Keeping our books and our proof: a legal obligation, and the defence of our rights should a dispute arise.

Knowing what works: three measurements, each described below, with what it keeps and what it does not.

Games, and the names people carry in them

To play, you just open a link or scan a code, and give a name. No account is needed, and we ask for nothing else: no address, no age, no phone number. The name is yours to choose: your first name if you like, a nickname if you prefer.

That name is visible to the other players in the game, and to no one else. It does not leave the game.

During a game, our servers keep the state of the room and a log of what was done, who voted, who was chosen, at what time. That serves two things and nothing else: running the game, and bringing you back if your phone locks or the network drops.

All of this rests on our legitimate interest in running the game that was asked for. You may object by writing to contact@lougawou.app.

Thirty days after a game was last active, all of it is erased: the names, the room, the log. A game that stops on the way, or a room opened and never played, is erased the same way: what counts is the last activity, not an ending that never came. Only a count remains, and it carries no name. And this data never goes into our backup copies: it lives in the database, and nowhere else. When we say erased, we mean erased.

If you share the end-of-game image, that is your move and your network: we do not post it for you.

How long we keep it

We keep each thing for as long as it takes, and we say how long.

Your address in the register: until you unsubscribe, and at most two years after your last exchange with us, or after the end of your contribution if you supported the project. After that we write to you once to ask whether you want to stay; with no reply, we erase. Opening a newsletter does not count as an exchange.

Your account: for as long as it lives. After two years without any activity, we warn you, then we close it. Your paid cards stay attached to you, not to the account: they are restored on simple request.

Your right to your paid cards, after the account is closed: ten years, the life of the proof of your payment, since that proof is what gives them back to you.

Your age declaration: for the life of your account, and it goes with it.

The traces of your sign-ins, IP address and browser: for the length of the session, and they are erased with it.

Game data, names, room, log: thirty days after the game was last active.

The token that keeps your seat in a game: for the length of the game, on your device.

Your payments and our accounting records: ten years. That is not our choice, accounting law requires it and we cannot depart from it. The rest of your contribution is erased with your other data: only the records accounting demands remain.

Your unlock code, and an invitation code if you were given one: for as long as the right it opens, since that right is what it proves.

If you withdraw from your contribution: your declaration and the acknowledgement we send you, ten years, like the other records of that contribution.

Proof of your consents and objections, that is, which version of this text you read and on what day: for as long as the processing lasts, then five years, the ordinary period during which a dispute remains possible. If you ask for your data to be erased, this proof goes with it, and only the erasure register keeps a fingerprint.

The erasure register: with no time limit, because it exists only to stop you coming back. It holds a fingerprint of your address and a date, nothing else. The next section explains it.

Audience measurement: twelve months of detail, then only counts per day, per link and per page, holding no personal data.

The link between a visit and your registration: for as long as your registration exists, and it is erased the day you object to it.

Opens and clicks of our newsletters: for as long as your address is in the register, including once you have unsubscribed; erased with it.

Our hosts' technical logs: a few days, depending on what each of them keeps. We do not use them to follow you.

Your exchanges with us, a request and our answer: as long as it takes to reply, then five years, to prove that we did.

Our backups, and what erasure means

Every day, an encrypted copy of the database goes to a private repository hosted by GitHub, so that nothing is lost if something goes wrong. The copy is encrypted before it leaves, and only we hold the key that opens it: GitHub keeps a file it cannot read. We owe you the truth on two points.

First, game data is never in it. It is excluded from the copy. What we erase after thirty days is erased for good, with no copy to keep it alive.

Second, those daily copies pile up, and we do not erase them. An address that was once in the database left a trace in the copy made that day. We do not rewrite that history: rewriting a backup means giving up the safety net at the very moment you need it.

So here is what we hold to, and it is a commitment. When you ask for erasure, we erase you from the database, and we record your request in an erasure register. Any restoration from a copy replays that register before the service comes back up. In other words: an old copy never brings you back. That register holds only what it takes to recognise you and never bring you back, in a form that cannot be read, and nothing more.

Who else can see it, and where

We neither sell nor rent anything. Apart from us, only our technical providers see your data, each for its own task:

• Supabase, for the database, sign-in and real time. The database is hosted in the European Union. The company that provides it, Supabase Pte. Ltd., is established in Singapore.
• Vercel Inc., a United States company, which serves the pages of this site.
• Stripe, which takes the payments. Your card number never passes through us.
• Resend, which routes our emails from the European Union.
• Google and Apple, if you choose to go through them to open your account. They then pass your address on to us, and they know, by that fact, that you came to us. If you would rather not, signing in by email address and code does exactly the same thing.
• GitHub, which hosts the private repository where the encrypted copy of our database goes every day. It keeps a file it cannot open: we hold the key.
• The provider that receives our mail, ImprovMX, through which the messages you send to contact@lougawou.app reach us.

Some of these providers are established outside the European Union, or may access the data from outside it. Those transfers are covered, depending on the provider, by the European Commission's adequacy decision of 10 July 2023 for the United States, or by the Commission's standard contractual clauses. Ask us for a copy of those safeguards at contact@lougawou.app and we will send it.

Cookies and trackers

No cookie, no third-party trackers, no banner to click.

Your device remembers a few things, used only between it and us: your language, where you paused the music excerpt, the token of the link that opens your space, your session once your account is open, and, during a game, a token that keeps your seat so you can come back after a call or a locked screen. That last one disappears when the game ends.

These are strictly necessary to the service you asked for, and serve nothing else: that is why they do not ask for your agreement. Our own audience measurement writes nothing at all on your device.

Measuring our audience

We count visits to know what works: how many people come, through which link, which pages they read, where they stop. This measurement is ours alone: no third-party tool, no advertising, nothing shared or sold. Your device receives neither cookie nor identifier: your visit is tied to a technical key recomputed every day, which cannot recognise you from one day to the next. Your IP address is used to recompute that key, and this measurement writes it down nowhere; our hosts' technical logs do keep a trace of it for a few days, and we do not use them to follow you. If you leave your address or contribute to the project, we link that visit to your registration, to know how you found us: this rests on our legitimate interest in understanding what keeps the project alive, and you may object at any time by writing to contact@lougawou.app, and the link is erased, your journey becomes anonymous again, and your registration is unaffected. The detail of visits is erased after twelve months; only counts per day, per source link and per page remain, and they hold no personal data.

How we measure games

We count five things about games: a game opened, a player joining, a game starting, a game reaching its end, a game stopping on the way. Each count carries the game mode, the number of players, the number of roles, the duration and the winning faction. That tells us whether games reach their end and whether the game is balanced.

These counts carry no name, no room code, no address, no visit key. Nothing can tie them to you, not now and not later, and that is not a promise: there is simply nothing to tie.

Our newsletters, and how we measure them

Our emails are routed by Resend, our processor, from the European Union; it knows how they were delivered: delivered, bounced, complained. With your consent, we also measure what becomes of our newsletters, and only those: an invisible image tells us a newsletter was opened, an indicative measure since some mail apps load images on their own, and links pass through our own address before taking you to the page, which tells us a link was followed. For each newsletter sent, we keep whether it was opened and whether a link was followed, once, without your IP address or your browser. These counts help us write less, and better. The emails that carry out our commitment to you, confirming a contribution, a code, a refund, hold neither image nor tracking link. You can refuse this measurement without leaving the register by writing to contact@lougawou.app: your newsletters will then go out without any image or tracking link. Unsubscribing stops everything.

If you are under 18

The game is for teenagers and adults. Younger players can play as guests, in the games of the people around them: there is nothing to create, and nothing to give but a name, which can be a nickname.

To create an account you must be at least 15. Below that age, you need the agreement of a parent, or of whoever holds parental authority. We ask you when you create the account, and we keep your answer.

To support the project, you must be of age. To buy a card in the shop, once it opens, you will need to be of age, or have a parent's agreement.

Two things rest on your agreement and on nothing else: the news checkbox, and the gender question. Both are optional, and you can change your mind at any time. Below 15, that agreement is given together with a parent.

If you are a parent and you want to know what we keep about your child, have it corrected or have it erased, write to contact@lougawou.app. We answer, and we erase what the law lets us erase, within the same limits as for everyone, the ones set out above. In a game, the name given is erased thirty days later in any case.

Your rights

The GDPR gives you rights. We answer them, without making you earn them:

• access what we hold about you, and receive a copy of it;
• correct what is wrong or incomplete;
• erase your data, within the sole limits the law imposes on us, our invoices for example, which stay for ten years;
• restrict a processing while a disagreement is settled;
• take away what you gave us yourself, in a machine-readable format;
• withdraw your consent whenever you want, without calling into question what was done before;
• object to what rests on our legitimate interest: linking a visit to a registration, the news sent to people who contributed, and the name you carry in a game;
• refuse the measurement of our newsletters, without leaving the register.

Write to contact@lougawou.app. We answer within a month; if the request is complex, we tell you so within that first month and take at most two months more, explaining why. If we have a doubt about who is writing, we ask for what it takes to clear it, and nothing more.

To withdraw your consent on your own, request your unsubscribe link: it will be sent to you by email.

You may also lodge a complaint with the CNIL (cnil.fr), the French data protection authority.