Legal
Privacy
Policy
Last updated: July 2, 2026
Data Controller
Loïc Ambrosini, sole proprietor (entrepreneur individuel) trading as HOLOCRON FACTORY — 6 Rue d'Armaillé, 75017 Paris, France.
SIREN: 948 466 099. Contact: contact@canardbourre.fr.
What we collect
| Data | Where | Why | Duration |
|---|---|---|---|
| Email address | Website (pre-registration form) | Notify when the app launches | Until app launch, then deleted on request |
| Player names | Mobile app | Personalise cards during the game | Stored on-device only, never transmitted |
| Anonymised usage data | Mobile app (PostHog) | Improve game experience | No personal data or names transmitted |
| Subscription status | Mobile app (RevenueCat) | Manage access to premium content | Duration of active subscription |
The app requires no account, no sign-up, and no network connection to play.
Pre-registration form (website)
By entering your email address on canardbourre.fr, you agree to receive a single email when the app launches. No newsletter, no follow-up messages.
- Legal basis: consent (Art. 6.1.a GDPR)
- Storage: secure database hosted on OVH VPS (France)
- Sharing: no third party has access to these addresses
In-app purchases
Purchases are processed by Apple (App Store) or Google (Google Play), acting as resellers. Subscription and access management is handled by RevenueCat (privacy policy). The publisher has no access to your payment details. See also Apple's and Google's privacy policies.
Usage statistics
The app uses PostHog to collect strictly anonymised usage statistics (card types played, session durations) to improve the game experience. No personal data or names are transmitted. No advertising identifier, no data resale. Data is hosted in the European Union (PostHog Cloud EU instance). You can disable these statistics at any time in the app settings. PostHog privacy policy.
Hosting
The website and API are hosted on an OVH SAS VPS (2 rue Kellermann, 59100 Roubaix, France).
Transfers outside the European Union
Usage statistics (PostHog) and pre-registration emails are hosted in the European Union: no transfer outside the EU. Subscription management by RevenueCat (United States) involves a transfer governed by the EU–US Data Privacy Framework and, failing that, by the European Commission's Standard Contractual Clauses.
Minors
The app and website are restricted to adults (18 and over). We do not knowingly collect any data relating to minors; should such collection come to our attention, the data concerned would be deleted without delay.
Your rights (GDPR)
Under the General Data Protection Regulation (GDPR), you have the right to access, rectify, erase, restrict and port your personal data.
To exercise these rights or withdraw your consent to pre-registration, write to contact@canardbourre.fr. Response within 30 days. You may also lodge a complaint with your local data protection authority (in France: CNIL).
Cookies
The canardbourre.fr website uses no advertising cookies or third-party trackers. Your language preference is saved in your browser's localStorage, on your device only.
Changes
This policy may be updated. The version in force is the one published on this page, identified by its last-updated date. In the event of a substantial change, a notice will be displayed in the app.