Privacy Policy

Data controller

The data controller is Grimoire Studio, the publisher of Plouf-Plouf.

For any question about personal data, you can write to [email protected].

Data we collect

Plouf-Plouf is designed to work without registration and without collecting personally identifiable information.

The participants you enter never leave your browser: they are stored temporarily in sessionStorage (key plouf-plouf.prefill.participants) solely to carry the list between pages within a single session. These data are erased when the tab is closed.

When you share a draw via a /r#… link, the participants list is encoded into the URL fragment (after the #). That fragment is never sent to our servers: it stays in your browser.

Our hosting provider may temporarily retain technical logs (IP address, user-agent, requested URL) for security and stability purposes. These logs are managed by Vercel (see the Hosting section).

Analytics

No analytics tool is active as of the last-updated date. If a privacy-respecting analytics tool is added later, this section will be updated to detail the data processed, the purposes, and whether consent is required.

Advertising

No advertising is displayed as of the last-updated date. When advertising is enabled, this section will be updated to specify the provider, the nature of any trackers, and the applicable consent mechanism (a consent-management banner or a cookie-free ad network).

Cookies and local storage

Plouf-Plouf does not use cookies for tracking. The only local-storage mechanisms used (sessionStorage) serve strictly operational purposes and do not require consent under the ePrivacy directive.

Should third-party cookies be introduced later (advertising, analytics), a consent banner will be put in place before any storage.

Hosting and transfers outside the EU

Plouf-Plouf is hosted by Vercel Inc. (440 N Barrow Ave, Emeryville, CA 94608, USA). As such, technical logs may be processed temporarily on servers located in the United States.

Vercel adheres to the EU–US Data Privacy Framework, which provides an adequacy basis for such transfers under Article 45 GDPR.

Retention periods

sessionStorage data is erased when the tab is closed. The hosting provider's technical logs are retained per its policy, typically for a limited period (under one year).

Your rights

Under the General Data Protection Regulation (GDPR), you have the right to access, rectify, erase, restrict, object to, and receive a portable copy of your personal data.

To exercise these rights, write to [email protected]. You may also file a complaint with the French data-protection authority (CNIL, www.cnil.fr) or your local supervisory authority.

Changes to this policy

This policy may be updated to reflect changes to the service or the applicable regulation. The last-updated date is shown at the top of this page.