Privacy policy

Controller and processed data

Antropus is the trade name of Thomas Wagner, a sole proprietor and the data controller. The service processes account and connection data, game actions, preferences, messages and reports required by the game, and support requests.

Purposes and legal bases

Account and game data are processed to provide the service and perform the terms. Security, abuse prevention and evidence retention rely on the publisher’s legitimate interests. Legal obligations apply where required.

Invitation request attribution

When someone visits a public page and then requests an invitation, the service may retain the source, medium and campaign named in the link, the path of the first page visited and the referring domain name only. These values are bounded and sanitized; no full referring URL or additional free-form parameter is stored. They are used to understand which content leads to a request and then to active participation, based on the publisher’s legitimate interest in improving the beta launch.

Payments and Stripe

For an order, Antropus processes the account, email address, pack, quantities, amount, currency, statuses and technical identifiers required for payment, refunds, disputes and reconciliation. Full card numbers and security codes are entered with Stripe and are not stored by Antropus. Stripe can act as Antropus’s provider and, for certain purposes of its own such as fraud prevention or regulatory duties, under the roles described in its privacy policy.

Recipients and hosting

Data are available only to authorized Antropus personnel and technical providers where necessary. Infrastructure is hosted by Hetzner Online GmbH in the European Union. Payments involve Stripe and the relevant banks and payment networks. Stripe can safeguard certain transfers outside the European Economic Area using mechanisms provided by the GDPR. Reports voluntarily shared with an alliance become visible to its members.

Retention

Account and game data are retained for the life of the account. Order records and accounting evidence are archived for ten years. Stripe event metadata are retained for 400 days to provide idempotency, security and payment diagnostics, then deleted or anonymized unless needed by law or to defend a legal claim. Support requests follow the retention period set by the administration. Invitation attribution follows the same retention period as its request and is deleted with it.

Cookies and local storage

The service uses only cookies and storage strictly necessary for sessions, security, language and interface preferences. No advertising or non-essential audience measurement tool is enabled as of this version.

Your rights

You may request access, correction, deletion, restriction or portability and object to processing based on legitimate interests. Use the publisher contact details in the legal notice. You may also lodge a complaint with the French data protection authority, CNIL.