Privacy Policy

Last updated: 5 August 2026

This policy describes how CartoFight processes your personal data, in accordance with the GDPR.

Data controller

The publisher of CartoFight (private individual, see Legal Notice). For any request regarding your data: contact@cartofight.com

Data collected

  • Account (via Google or Discord): identifier, display name, email address, profile photo.
  • Game data: progression (XP, level, tier), games played and wins, match history, per-map records, daily streak, friend code, friends list, presence status (online / in game).
  • Preferences: theme, language, basemap, sound settings — stored so they follow your account across devices.
  • Notifications: if you enable the streak reminder, your browser's technical subscription address and its encryption keys. They are used only to send that reminder, and are removed as soon as you turn it off.
  • Moderation: reports concerning you, and statistical cheat-detection indicators (the accuracy and speed of your answers).
  • Technical data: required for anti-fraud security (App Check / reCAPTCHA) and for the service to work.

Playing as a guest stores nothing: no profile, no history, no records and no statistics are saved for a guest account.

Purposes and legal basis

Provide the game and account (performance of the service), keep matches secure and fair (legitimate interest), send the streak reminder, and — where applicable — measure audience (subject to your consent, which you can withdraw at any time).

Recipients

Data is processed via Google Firebase (authentication, database, hosting) within the EU. No data is sold or shared for advertising purposes.

Retention

Data is kept while the account exists. Deleting the account erases the associated data (see below).

Your rights (GDPR)

You have the rights of access, rectification, erasure, objection and portability. In particular:

  • Erasure: you can permanently delete your account and data from Settings → Account → Delete account.
  • Rectification: your display name can be changed from your profile.
  • For other rights, contact contact@cartofight.com. You may also lodge a complaint with your country's data protection authority (in France, the CNIL).

Cookies and trackers

CartoFight uses local storage strictly necessary to run the game (preferences, session) and anti-fraud protection (reCAPTCHA / App Check). Any audience-measurement tracker is enabled only after your consent, via the dedicated banner.