This policy covers Histoires (histoires.chapplications.com), daily puzzle stories played on a phone.
Controller and contact
Christophe Hurpeau EI (Chapplications) is the data controller. Contact: contact@chapplications.com, 9 IMPASSE DE LA BELLE ANGUILLE, 56200 COURNON, France.
Data and use
To take part, you give a first name, an email address and how to address you (madam, sir or your first name alone). The first name and this form are used to write the story's texts. The email address is only used by the publisher to write to you about the story: the application sends no email and the address is shared with no one.
The server also records your progress in the story, the notes you write in the game's notebook and, for each connected device, its browser and last activity. This processing provides the service you request.
If you turn notifications on, the server records, for that device, the subscription address its browser gives it. Notifications go through the push service of the browser's publisher (Apple, Google or Mozilla, for example), which delivers them to the device. You can turn them off at any time in the game or in the browser's settings.
Retention
An account without activity for a year is deleted, with its progress, its notebook, its notification subscriptions and its connected devices. A subscription turned off is deleted at once. You may ask for its deletion at any time by writing to the contact above.
On your device
Your device keeps a session cookie, strictly necessary to stay signed in, whether you have seen the installation guide, whether the sound is muted and, until it reaches the server, what you just wrote in the notebook. No trackers, no analytics.
Hosting and security
Chapplications services are hosted by OVH SAS (2 rue Kellermann, 59100 Roubaix, France) in the European Union. The publisher and its hosting provider access the data needed to operate and secure the service.
Server requests may be recorded in technical logs (IP address, date and request) for security and diagnostics, based on the publisher's legitimate interest. These logs are retained for at most twelve months. They are not used for advertising or profiling.
Your rights
You may request access, correction, deletion or portability of your data, restriction of processing or object to it under the conditions set out in the GDPR. Write to contact@chapplications.com. Proof of identity may be requested if there is reasonable doubt. We normally respond within one month; a complex request may require an extension, which we will explain.
You may also lodge a complaint with the CNIL. Reading this policy does not constitute consent to optional processing.