Privacy Policy
Data Controller
The data controller for personal data collected via kluup.app is: Sitraka Rabarisoa Email: contact@kluup.app
Data Collected
Kluup collects only data strictly necessary for the service to function: • Connected accounts (Google OAuth): email address, first name provided by Google. • All players: chosen nickname for the session (ephemeral, duration of the game). • Connected accounts, persisted data: session statistics (number of designations, confessions, volunteerings, group title, theme played, number of rounds, trait scores) in the user_session_stats table. • Local storage (localStorage): room identity (kluup_pid_<CODE>), nickname, language preference. Anonymous play (without account): no personal data is persisted beyond the duration of the session.
Purposes and Legal Bases
Data collected is used for the following purposes: • Providing the game service (legal basis: performance of contract / legitimate interest). • Saving session statistics for logged-in users (legal basis: implicit consent upon Google sign-in). • Service improvement based on aggregated usage (legal basis: legitimate interest of the publisher). No data is used for advertising or commercial purposes.
Cookies and Local Storage
Kluup uses only functional and essential storage: • localStorage: room identity (kluup_pid_<CODE>), nickname, language preference. These data are purely functional and necessary for the application to work. • Session cookie (OAuth): strictly necessary cookie for Google authentication, valid for the duration of the session. No advertising, analytics or third-party trackers are present on this site. No cookie consent is required (ePrivacy exemption for strictly necessary cookies).
Retention Period
• Session statistics: retained as long as the Google account is linked to Kluup. Deletion on request via the "Delete my account" button on /profile. • Anonymous game sessions (rooms): automatically deleted after 30 minutes of inactivity. • localStorage data: retained until manually cleared or browser cache deletion.
Transfers Outside the European Union
Data is hosted on servers located in the United States: • Railway Corporation (548 Market St, San Francisco, CA 94104, USA), application hosting. • Supabase Inc. (USA), database and authentication. These transfers are governed by standard contractual clauses (SCC) approved by the European Commission, pursuant to Article 46 of the GDPR.
Sub-processors
The publisher uses the following sub-processors: • Railway Corporation, web application hosting 548 Market St, San Francisco, CA 94104, USA https://railway.app • Supabase Inc., database and authentication service USA https://supabase.com • Stripe, Inc., payment processing 510 Townsend Street, San Francisco, CA 94103, United States https://stripe.com Data transmitted: session and account identifiers (user_id / client_reference_id). Kluup collects and stores no bank-card data. Data stored by Kluup: entitlement status, stripe_customer_id, stripe_event_id in the entitlements table.
Rights of Data Subjects
In accordance with the GDPR, you have the following rights: • Right of access to your personal data. • Right of rectification. • Right to erasure ("right to be forgotten"), exercise this right via the "Delete my account" button on /profile. • Right to object. • Right to data portability. To exercise these rights, contact the publisher at: contact@kluup.app You may also lodge a complaint with the relevant data protection authority (CNIL in France: www.cnil.fr) if you believe that processing of your data does not comply with the regulations.
Minimum Age
The Kluup service is reserved for persons aged 18 and over. Some content (the "Unmasked" theme) is of an adult nature. By using this service, you confirm that you are of legal age in your country of residence.
Changes to This Policy
The publisher reserves the right to modify this privacy policy at any time. Any changes will be indicated by updating the "Last updated" notice at the bottom of this page. You are encouraged to review this page regularly.
The French version shall prevail. Last updated: 2026-06-17