Your data
What we keep, where, for how long, and how to take it back.
Last updated ·
Draft under review: the highlighted passages are waiting for information before publication.
What we keep
| Data | Why | Where | How long |
|---|---|---|---|
| Waitlist email, its language and its dates | Tell you when the app is out and send you news | Our database: Ikoula, France; encrypted backups at OVH, France and Germany | Until you unsubscribe, or until we close this list — your address is then erased unless you are subscribed to another of our lists |
| Your emails to us | Answer you | Proton AG (Proton), Switzerland — privacy policy | Three years after the last exchange |
| Account: nickname, verified email address, sign-in methods (Apple or Google identifier, public part of a passkey), device sessions | Let you sign in | Ikoula, France; encrypted backups at OVH, France and Germany | As long as the account exists; after 24 months without signing in, deleted no less than a month after a warning email |
| Sign-in code and link sent by email | Let you sign in | Ikoula, France; encrypted backups at OVH, France and Germany | 10 minutes, erased every day once expired |
| Accepted version of the terms, date of your “I am 13 or over” declaration | Prove your acceptance | Ikoula, France; encrypted backups at OVH, France and Germany | As long as the account exists |
| Version of your agreement to share your game content with the generation providers, and its date | Send nothing to the providers without your agreement, and ask it again when the list of named providers changes | Ikoula, France; encrypted backups at OVH, France and Germany | Until you withdraw it, or as long as the account exists |
| Previous email address, after a change | Let you undo the change with the “It wasn’t me” link sent to it | Ikoula, France; encrypted backups at OVH, France and Germany | 7 days |
| Characters, actions, thoughts, table messages | Play your stories | Ikoula, France; encrypted backups at OVH, France and Germany | As long as the account exists; after 24 months without signing in, deleted no less than a month after a warning email |
| Your subscription, its period and its end, your balance of credits and its movements, the journal of your purchases (transaction identifier, product, date, store); never your payment details, which stay with Apple or Google | Give each purchase to your account | Ikoula, France; encrypted backups at OVH, France and Germany; your purchases and your account identifier at RevenueCat, United States, our processor | As long as your account exists; once it is erased for good, the journal of purchases keeps the transaction identifier, the product and the date, without any link to your account, so that a purchase is never credited twice |
| Content flag: your account, the table, the turn, the narration or image flagged and its date, the reason, the sentence you may add, a copy of the narration you flagged, and the versions of the app, of your system, of your platform and of the server | Let you flag content that shocks you; only we read it | Ikoula, France; encrypted backups at OVH, France and Germany | 12 months after you send it, then erased; erased earlier with your account |
| Voices, portraits and images of your stories and private universes | Tell your stories | OVH, France; backup copy in Germany | As long as the table or the universe exists; erased with your account when they concern no other player (see What is deleted) |
| Game data, pseudonymised and then aggregated | Improve the experience | Ikoula, France; encrypted backups at OVH, France and Germany | 13 months; you can object |
| Analysis journal of the calls to the text models, fictional game content | Repair and improve the game master | OVH, France; backup copy in Germany | A limited time, 15 days today, then erased from our storage and from its backup copy three days at most later; erased with your account when it concerns no other player |
| IP address (access log of the web proxy) and technical logs | Protect the service | Ikoula and OVH, France; backup copy of the technical logs in Germany | 30 days |
| An identifier calculated from your IP address and your browser, which changes every month, and a visit identifier derived from it, which changes every hour; the date and time; the page seen, without its parameters; the address of the site you came from, reduced to its domain; a click towards a store or a confirmed waitlist sign-up; your browser, system and type of device; your country, region and city, worked out from your IP address. No cookie, and your IP address is never kept | Measure the audience of this site | Our server at Ikoula, France; encrypted backups of our database at OVH, France and Germany | 13 months; you can object |
| Days you played | Understand how the app is used | Ikoula, France; encrypted backups at OVH, France and Germany | 13 months |
Sharing with the generation providers
Your game content is sent to Anthropic (United States), OpenAI (United States), and Google (United States), for the text of the game master, the voices and the images; each generation is served by one of them.
What is sent to them: your declarations, what you write when you create a character, a story or a universe, and the state of the game. What is never sent to them: your email address, your account identifier, your device.
Nothing is sent to these providers before you agree, in the app, to share your game content with them. Your agreement is asked again whenever the list of named providers changes. You can withdraw it at any time from Account, in the “Your data” section, unless you are seated at a table shared with other players: then you delete your account to stop all sharing; withdrawing deletes neither your tables nor your characters, but without your agreement you can no longer play, since the game master is an artificial intelligence.
Exercise your rights
- See and correct your nickname and your characters: directly in the app.
- Delete your account: see the Delete my account page.
- Leave the waitlist: use the unsubscribe link at the bottom of each of our emails.
- Receive a copy of your data: the “Request my data” button in the app opens an email to contact@mygamemaster.fr, already filled in with your nickname and your account identifier.
- Object to our use of your game data to improve the experience, or anything else: write to contact@mygamemaster.fr.
We answer within one month. If your request is complex, we may take two more months and tell you why. We may ask you a question to make sure the account is yours, but never for an identity document by default.
If you are not satisfied with our answer, you can complain to the CNIL on cnil.fr.
What stays after you leave
A story is lived together. When you delete your account, what you shared with a table (the story told, its images) stays with the other players, with your nickname replaced by “A player who left”. Your account and your private thoughts are deleted; the analysis journal of a table you leave to other players, private thoughts included, stays until its limited time runs out. An account with no sign-in for 24 months is deleted the same way, automatically, after a warning email in the 23rd month and never less than a month after it.
When you ask to delete your account, it is first archived for eight days: the other players no longer see it, your nickname shows as “A player who left”, and no processing reads it. Signing in again before the end of those eight days, or the “Keep my account” button in the email we send you, cancels the deletion. After eight days, your account is erased for good and an email confirms it. Our encrypted backups keep a copy for forty days at most after the erasure, at OVH, in France and Germany, with no transfer outside the European Union. A voice, portrait or image erased with an account disappears from our storage for good thirty-one days at most after its erasure.
We also keep the address of anyone who unsubscribed from our emails, only so as never to write to them again, for three years.