Privacy policy

Last updated: 13 October 2026

Panigma is a free game. It shows no ads, sells no data and uses no third-party audience measurement tool. This page explains what is collected, why, for how long, and how to exercise your rights. There is nothing to accept: it is here to inform you. The French version is authoritative.

Data controller

Clément, a private individual, publisher of Panigma — see the legal notice.
Contact for anything about your data: hello@panigma.fr.

What is collected

When you play, with or without an account

A random player identifier and a session token, stored on your device.
Your games: answers, scores, answer times, game language.
The platform you use (web, Android, iOS) and, where applicable, the Panigma link that brought you (for example a shared result).

If you create an account

Your e-mail address, and either a password (stored only as a hash, never in clear) or your Google identity if you sign in with Google.
Your nickname and avatar. Your nickname is public: it appears on the leaderboards.

If you turn on notifications (mobile): your phone's notification address, language and time zone, to tell you about your results.

If you report a problem: your message, together with your nickname and e-mail so we can reply, sent by e-mail.

Technical data

Your IP address, to limit abuse (request rates, sign-in attempts) and keep the service secure.
Server logs, also used to produce aggregate statistics (number of games, of accounts) that identify no one.
The pace of your answers, analysed to keep obviously impossible scores (cheating) off the leaderboards.
Crash reports (Firebase Crashlytics), in the published mobile app only: when the app crashes, a report is sent with the error, the device model, the OS version and a Firebase installation identifier. It contains neither your e-mail nor your nickname.

Never collected: advertising identifier, precise location, contacts, data for advertising purposes.

Why, and on what legal basis

Running the game (games, account, leaderboards, export, deletion): performance of the service you use.
Security, anti-cheating, app stability (including Crashlytics) and aggregate internal statistics: legitimate interest in providing a reliable, fair game. You may object (see "Your rights").
Notifications: only if you allow them on your phone; turn them off at any time in Profile or in your phone settings.

Who has access

Only the publisher accesses your data. It is hosted and processed on the publisher's behalf by:

Google Cloud and Firebase (Google Ireland Ltd): servers and database in Belgium (europe-west1 region), website hosting, notifications, crash reports, Sign in with Google.
IONOS and Google (Gmail): sending and receiving e-mail.

Some of these services may involve a transfer to the United States (Google LLC), covered by the EU–US Data Privacy Framework and the European Commission's standard contractual clauses.

YouTube

Panigma publishes short videos on its own YouTube channels using the YouTube API Services. This tool is used only by the publisher, to upload videos to Panigma's channels: the game never asks you to connect a YouTube account and collects no YouTube data about you. Your use of YouTube is governed by the YouTube Terms of Service and the Google Privacy Policy.

TikTok

Panigma publishes short videos on its own TikTok accounts using TikTok's Login Kit and Content Posting API. This tool is used only by the publisher, who connects Panigma's own accounts and approves each post: the game never asks you to connect a TikTok account and collects no TikTok data about you. For those accounts, Panigma keeps only what posting requires (the account's identifier and display name, and its access tokens, stored encrypted). Your use of TikTok is governed by the TikTok Terms of Service and the TikTok Privacy Policy.

How long it is kept

Account: until you delete it.
When you delete your account (Profile › Delete my account), the following are erased immediately: e-mail, password, nickname, nickname history, leaderboard entries, replays, sessions and notifications. Your past official games are kept, detached from any identifying data, so that published leaderboards are not rewritten.
Players without an account: games stay tied to a random identifier, with no identifying data, with no time limit for now.
Server logs: 30 days.
Record of sent notifications (so none is ever sent twice): 7 days.
Crash reports: 90 days.
Problem reports: as long as needed to handle them.

Storage on your device

Panigma stores on your device only what the game needs: your session, your language and your display preferences, in the application's local storage. Panigma sets no cookie at all — no advertising, no audience-measurement and not even a session cookie — which is why no consent banner is shown.

Your rights

Access and portability: Profile › Export my data.
Rectification: Profile, for your nickname and avatar; by e-mail for anything else.
Erasure: Profile › Delete my account.
Objection (including to crash reports) and restriction: by e-mail to hello@panigma.fr.

You will get an answer within one month. If you believe your rights are not respected, you may lodge a complaint with the French data protection authority, CNIL, or with the authority of your own country.

Changes

This policy may change, for example if a new feature collects other data. The date at the top shows the latest update. No audience measurement will ever be turned on without asking for your consent first.