Klapdrop is a free game, without ads, that sells no data. This page says what we keep, why, for how long, with whom, and how to use your rights.
Controller
Florian Magalhaes, publisher of Klapdrop (see the legal notice). Contact: [email protected] or the contact form.
What we keep
- Your account: email address, username, display name, profile photo if you add one, language. With Google sign-in: the email address and name Google gives us.
- Your game: your cards, boosters, klaps and coins, duels, trades, sales, achievements, sets, your guild and its messages, your reports and those about you.
- Your activity: the pages you visit and what you do in the game, for security, fighting cheating and improving the game.
- Technical data: your IP address (limits against abuse, protection against bots), your browser's notification subscription if you turn them on.
- Your messages sent through the contact form.
Why, and on what basis
- Running the game and your account: performing the terms of use.
- Protecting the game (cheating, abuse, bots) and fixing errors: our legitimate interest.
- Measuring how the game is used, to improve it: pages viewed anonymously, and game actions (a booster opened, a duel played…) tied to an encrypted identifier, never to your name or email. Nothing is stored on your device for it: our legitimate interest.
- Push notifications: your consent, which you can withdraw at any time in Settings.
For how long
- Your account and your game: as long as your account exists.
- A game without an account (guest): 24 hours, then everything is erased.
- Pages visited: 90 days. Other actions: 365 days.
- Contact messages: 365 days.
- When you delete your account, your data is erased. Only the traces the game's economy needs for other players remain, without your name (a card you sold, a trade).
With whom
We neither sell nor rent any data. It is processed for us by these providers, each for its own role:
| Service | Role | Data hosted in |
|---|---|---|
| OVHcloud | Hosting the site, its database, and the sessions, leaderboards and live duels | European Union |
| Cloudflare (R2) | Image storage | European Union |
| Cloudflare (Turnstile) | Protection against bots at sign-in | United States |
| Resend | Sending emails (sign-in, replies) | United States |
| Sign-in with Google, if you choose it | United States | |
| Sentry | Tracking the site's errors | European Union |
| PostHog | Audience measurement | European Union |
When data is processed outside the European Union, it is under the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
Cookies
Klapdrop sets no advertising cookie. The cookies it uses are needed by the game: your sign-in session, your language, the chosen universe and your display preferences. Audience measurement stores no cookie nor anything else on your device; should it ever do so, your consent would be asked first.
Your rights
- Download your data (access, portability): Settings → My data.
- Delete your account (erasure): Settings.
- Correct your username, photo or language: Settings and your profile.
- For anything else (objection, restriction, a question): [email protected] or the contact form. We answer within a month.
- You can also complain to the French data protection authority, the CNIL: cnil.fr/fr/plaintes.
Age
Klapdrop is for people aged 16 and over, the age from which one can consent alone to the processing of one's data in France.
Changes
If this policy changes significantly, we will tell you in the game before the change applies.