Privacy policy

What we collect, why, who helps us, how long we keep it, and your rights.

Last updated · October 29, 2026

Draft under review: the highlighted passages are waiting for information before publication.

What we collect, and why

Each use of your data, its legal basis and how long it is kept
Use	Data	Legal basis	Kept for
Tell you when the app is out and send you news: behind the scenes, invitations to try it or give your opinion (waitlist)	Email address, language, dates of your sign-up, of your confirmation and of your unsubscription	Your consent	Until you unsubscribe, or until we close this list — your address is then erased unless you are subscribed to another of our lists. Unconfirmed: nothing is kept, and the link expires after 48 hours
Answer your emails	Email address, your message	Our legitimate interest in answering you	Three years after our last exchange
Prove your agreement to share with the generation providers	The version of your agreement and its date	The contract (terms of use)	As long as the account exists, or until you withdraw it
Your account and sign-in	Nickname, verified email address, the sign-in methods linked to your account (the identifier Apple or Google gives for it, the public part of a passkey, never a fingerprint or a secret of your device), device sessions	The contract (terms of use)	As long as your account exists; deleted after 24 months without signing in, and never less than a month after a warning email sent in the 23rd month
Sign you in by email	A code and a link sent by email: the link kept only as a fingerprint, the code encrypted	The contract (terms of use)	Valid for 10 minutes, erased every day once expired
Prove that you accepted the terms and declared your age	Version of the terms and privacy policy you accepted, its date, the date you declared “I am 13 or over”	The contract (terms of use)	As long as your account exists
Revoke Sign in with Apple when your account is deleted	The token Apple gives to revoke access, encrypted	The contract (terms of use)	As long as Apple is linked to your account
Let you undo a change of email address you did not make	Your previous email address	Our legitimate interest in the security of your account	7 days after the change, the time the “It wasn’t me” link stays valid
Delete your account when you ask	The date of the scheduled deletion	Your request (right to erasure)	Archived for eight days, then erased; a copy stays in the encrypted backups for forty days at most (see below)
Sell the subscriptions and the credits, and give each purchase to the right account	Your subscription, its period and its end, your balance of credits and its movements, the journal of your purchases (transaction identifier, product, date, store); never your payment details, which stay with Apple or Google	The contract (terms of sale); after your account is erased, our legitimate interest in never crediting the same purchase twice	As long as your account exists; once it is erased for good, the journal of purchases keeps the transaction identifier, the product and the date, without any link to your account, so that a purchase is never credited twice
Play your stories	Your characters, the actions you write, your private thoughts, table messages, the story told, its images and voices	The contract (terms of use)	As long as your account exists; shared story moments stay with the table (see Your data)
Let you flag content that shocks you, and let us act on it	Content flag: your account, the table, the turn, the narration or image flagged and its date, the reason, the sentence you may add, a copy of the narration you flagged, and the versions of the app, of your system, of your platform and of the server	The contract (terms of use) and our legitimate interest in knowing what our product generates	12 months after you send it, then erased; erased earlier with your account
Keep the service secure	IP address, technical logs, sign-in events	Our legitimate interest in security	30 days
Measure the audience of this site	An identifier calculated from your IP address and your browser, which changes every month, and a visit identifier derived from it, which changes every hour; the date and time; the page seen, without its parameters; the address of the site you came from, reduced to its domain; a click towards a store or a confirmed waitlist sign-up; your browser, system and type of device; your country, region and city, worked out from your IP address. No cookie, and your IP address is never kept	Our legitimate interest in knowing how the site is visited; this measurement needs no consent under the rules of the CNIL, and you can object	13 months; you can object
Understand how the app is used	Days you played, whether you took a turn	Our legitimate interest in improving the app	13 months
Improve the experience	Game data, pseudonymised and then aggregated	Our legitimate interest, you can object	13 months
Repair and improve the game master	The analysis journal: what each game sends to the text generation models and what they answer, fictional game content, without your email address, account identifier or nickname	Our legitimate interest in running and improving the service	A limited time, 15 days today, then erased from our storage and from its backup copy three days at most later

We never sell your data and never use it for advertising.

How stories are told

The stories, voices and images of MyGameMaster are generated automatically by an artificial intelligence system, from your choices and those of the other players at your table. To produce them, we send the game content (the actions written at the table, the characters, the state of the story) to named providers, outside the European Union: Anthropic (United States), OpenAI (United States), and Google (United States), for the text of the game master, the voices and the images; each generation is served by one of them.

The voices are those of a synthetic narrator, and the images are drawn for the story: we never record your voice, and we never collect or store any photo or recording of you.

What we send them is game content only: never your email address, your account identifier, your device, or anything else that would link a game or a use to you. What you write yourself, at the table or when you create a character, a story or a universe, leaves with it, so do not write personal information about yourself or anyone else in your actions. These transfers are covered by the European Commission’s standard contractual clauses.

What is sent to them: your declarations, what you write when you create a character, a story or a universe, and the state of the game. What is never sent to them: your email address, your account identifier, your device.

Nothing is sent to these providers before you agree, in the app, to share your game content with them. Your agreement is asked again whenever the list of named providers changes. You can withdraw it at any time from Account, in the “Your data” section, unless you are seated at a table shared with other players: then you delete your account to stop all sharing; withdrawing deletes neither your tables nor your characters, but without your agreement you can no longer play, since the game master is an artificial intelligence.

No decision with legal or similarly significant effect on you is made automatically.

Who helps us

These providers process your data on our instructions only, under a contract that binds them to protect it:

IKOULA NET (IKOULA), SAS, RCS Paris 417 680 618, 2 Cité Paradis, 75010 Paris, France, +33 1 84 01 02 50: the site, accounts and game data, in France.
OVH SAS, RCS Lille Métropole 424 761 419, 2 rue Kellermann, 59100 Roubaix, France: voices, portraits and images in France, with a backup copy in Germany; technical logs and the analysis journal in France, with a backup copy in Germany; and encrypted backups of accounts and game data, in France and Germany. If our server fails, and during our recovery drills, a copy of the data is temporarily restored on a server rented at OVH, in France, then destroyed.
Proton AG (Proton), Switzerland, whose privacy policy — including how long it keeps data — and data processing agreement are public: our email sending provider, a processor under the GDPR, sees every email we send pass through — the newsletter, the confirmation email, the one-time sign-in code and the messages you send us, the waitlist emails and the account emails (sign-in codes, security alerts, deletion). It keeps no list of ours: the waitlist lives in our own database. The emails are sent from no-reply@mygamemaster.fr; to answer us, write to contact@mygamemaster.fr. There is no open or click tracking. We chose Proton to respect your privacy and the confidentiality of your exchanges: its servers are in Switzerland and its emails are encrypted.
Anthropic (United States): the text of the game master, the voices or the images, for each generation it serves, game content only, outside the European Union, under the standard contractual clauses.
OpenAI (United States): the text of the game master, the voices or the images, for each generation it serves, game content only, outside the European Union, under the standard contractual clauses.
Google (United States): the text of the game master, the voices or the images, for each generation it serves, game content only, outside the European Union, under the standard contractual clauses.
RevenueCat, Inc. (RevenueCat), United States: our in-app purchase provider, a processor under the GDPR. It receives from the App Store and Google Play your purchases and the identifier of your account, and tells us what each purchase gives; it never receives your payment details, which stay with Apple or Google. Its record of your account is erased when your account is erased for good. These transfers are covered by the standard contractual clauses.
Proton AG (Proton), Switzerland — privacy policy: our contact mailbox.

Content flags are read by us alone, the publisher. They are stored with the rest of our data by the hosts named above, who do not read them; no other provider receives them. They are used for nothing else than deciding whether to act on the product, and never to profile you. A flag may quote what another player wrote at your table.

Apple and Google also receive data, as authentication services, when you choose to sign in with them:

Apple and Google check your identity and send us a verified email address and an identifier for your account. They are located outside the European Union, including in the United States, and these transfers are covered by the safeguards provided by the GDPR.
If you hide your email address from Apple, our emails reach you through Apple’s relay.

When you delete your account

When you ask to delete your account, it is first archived for eight days: the other players no longer see it, your nickname shows as “A player who left”, and no processing reads it. Signing in again before the end of those eight days, or the “Keep my account” button in the email we send you, cancels the deletion. After eight days, your account is erased for good and an email confirms it. Our encrypted backups keep a copy for forty days at most after the erasure, at OVH, in France and Germany, with no transfer outside the European Union. A voice, portrait or image erased with an account disappears from our storage for good thirty-one days at most after its erasure.

An account with no sign-in for 24 months is deleted automatically, without an archive: a warning email is sent in the 23rd month, and the deletion never comes less than a month after it.

Cookies and tracking

We measure the audience of this site, and nothing else, with Umami, free software installed on our own server at Ikoula, in France: we count the visits, the pages seen, the clicks towards a store and the confirmed waitlist sign-ups, for ourselves alone. The data stays on our server and in the encrypted backups of our database at OVH, in France and Germany, for forty days at most after they are erased; it is never shared and is never linked to an account, an email address or anything you type in a form. We do not follow you on other sites, and we measure no advertising campaign.

The site sets no cookies. To count visitors, Umami calculates an identifier from your IP address and your browser, mixed with a value that changes every month: from one month to the next, the identifiers are not linked. Your IP address is used for this calculation and to find your country, region and city, and is never kept. The address of a page is kept without its parameters, and that of the site you came from is reduced to its domain. What we keep is pseudonymous, not anonymous: the totals are anonymous, but Umami’s interface can also show us the pages seen under a single identifier within a month, and only we can see it. We also read the totals in our own monitoring tool, on the same server, through the same private access: no one else receives them. A visit identifier, derived from the first, changes every hour. Everything is erased after 13 months. Pages that read a sign-in or account token, such as sign-in, account deletion or unsubscribing, are never measured.

This measurement is set up as the CNIL requires for audience measurement exempt from consent, which is why there is no cookie banner. It rests on our legitimate interest in knowing how the site is visited, and you can object at any time with the button below, and come back on your choice the same way: your choice is kept in this browser only, by a marker in its local storage. If your browser sends Do Not Track or Global Privacy Control, you are not measured at all. The measurement goes through JavaScript: without it, nothing is measured.

The app contains no advertising or analytics kit. Our emails contain no tracking pixel.

Your rights

You can access your data, correct it, delete it, receive a copy, limit its use, object to uses based on our legitimate interest, and withdraw your consent at any time. You can also leave instructions about your data after your death. The Your data page explains how, and we answer within one month.

If you think we are not respecting your rights, you can complain to the CNIL, the French data protection authority: cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.