Privacy policy

1B2C - BENOIT CRUNELLE CONSULTING (51 rue Pasteur, 59160 Lille, France), publisher of Osteonix, is the controller of your data. Contact: contact@osteonix.app. The company has not appointed a data protection officer, as it is not required to.

No account with a password, no phone number, no real name, no location, no contacts, no advertising ID, no ads or ad tracking. We only ask for your email if you buy Premium on the web. We sell no data.

• Player ID: on first launch, our servers create a random identifier (an anonymous player session), stored securely on your device. It doesn't reveal who you are.
• Name: the name you choose, visible to the other players in the same game. Avoid using your full name.
• Game data: room code, role, votes, game actions and result.
• Statistics: games played, wins, roles and sides played.
• Premium purchase, if you buy: platform, product reference, amount, date and transaction ID. In a store, this includes the hashed receipt provided by Apple or Google; on the web, the email address entered at payment, used to send your receipt and restore Premium, and your billing country. We never receive your card details.
• Technical data: IP address, processed temporarily to protect the service against abuse and in server logs; if the app crashes, a technical report (device model, OS and app version, error trace, technical game identifiers).
• On your device only: your settings (sound, theme, language).

No cookies, no audience measurement, no third-party trackers. If you switch language, that choice may be stored in your browser's local storage. The server keeps technical logs (IP address, requested page) for security purposes.

• Running the game and your profile (ID, name, games, statistics): performance of the contract, i.e. the terms of use.
• Activating and restoring Premium (purchase data): performance of the contract.
• Security and abuse prevention (IP address, logs): legitimate interest in protecting the service.
• Fixing crashes (crash reports): legitimate interest in keeping the app stable.
• Answering your messages (email, message content): legitimate interest.

• ID, name, statistics and purchases: until you delete your data from the app, and at the latest 24 months after you last use it.
• Receipts and transaction data for web purchases: kept by Stripe, and in our accounts, for 10 years under accounting obligations, even if you delete your account.
• Finished games: 6 months after the game.
• Server logs: 30 days at most.
• Crash reports: 90 days.
• Backups: 30 days, so deleted data leaves the backups within 30 days.
• Support messages: 3 years after the last exchange.

Only the publisher, who relies on service providers acting on its behalf:

• OVH SAS: server hosting, in France;
• Stripe (Stripe Payments Europe, Ltd., Ireland): payment for web purchases. Stripe also acts as an independent controller for its legal obligations (fraud prevention, accounting);
• Sentry (Functional Software, Inc., United States): crash reports.

Apple and Google process your payments and your store account as independent controllers, under their own privacy policies.

Sentry is a US company, and Stripe may process some data in the United States. These transfers are covered by the EU–US Data Privacy Framework and the European Commission's standard contractual clauses.

You have the right to access, rectify, erase, restrict, object to and port your data, and to set instructions for what happens to it after your death.

• Immediate erasure: in the app, Profile > Privacy & Data > Delete my account.
• Rectification: change your name in your profile.
• Other requests: write to contact@osteonix.app. As we don't know who you are, we may ask for your player ID to find your data. We reply within one month.

You can also lodge a complaint with the French data protection authority, the CNIL: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr.

Osteonix is intended for people aged 13 and over. Any purchase by a minor must be authorized by a parent, which Apple's and Google's parental controls allow.

Encrypted connections (HTTPS), time-limited session tokens, payment details never received, restricted server access.

The date of the last update is shown at the top of this page. If anything important changes, we'll let you know in the app.