Privacy Policy
Last updated: 20 July 2026
This policy explains what personal data the 8Score mobile application and the website 8score.fr (together, the “Service”) process, why, and what your rights are. The data controller is the publisher identified in the Legal Mentions.
1. Data we collect
Account data: when you sign in with Apple or Google, we receive your name (or the pseudonym you choose to share), your email address (or Apple’s private relay address), and a technical account identifier. We never receive your Apple or Google password.
Game data: the games you create or join, meaning game and player names, scores, timestamps, and the edit history needed to sync and undo. Game data is shared with the other participants of the same game, which is the purpose of the Service.
Technical data: server logs (IP address, request metadata, error traces) generated when your device talks to our servers, kept for security and debugging.
We do not collect your precise location, contacts, photos, or health data. The website 8score.fr sets no analytics or advertising cookies.
2. Why we process it (legal bases)
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Account data | Authenticate you, operate your account | Contract (art. 6(1)(b)) |
| Game data | Store and sync games between participants | Contract (art. 6(1)(b)) |
| Technical data | Security, abuse prevention, debugging | Legitimate interest (art. 6(1)(f)) |
3. Advertising and tracking
Today: none. The Service currently shows no advertising and performs no cross-app tracking. If advertising launches in a future version, this policy will be updated before that release, and any tracking will only happen with your consent through Apple’s App Tracking Transparency prompt.
4. Who processes the data
We use the following processors to operate the Service:
- Railway Corp. (USA): hosts the backend servers and database (account and game data).
- Cloudflare, Inc. (USA): serves the website and fronts web traffic.
- Apple Inc. and Google LLC: sign-in providers (they process your authentication; see their own privacy policies).
Transfers outside the EU rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses, as applicable to each provider. We do not sell personal data, and we share it with no one else except when legally required.
5. Retention
- Account data: kept while your account exists; deleted when you delete your account.
- Game data: kept while the game exists; deleted when the game is deleted, or with the account of its last remaining participant.
- Technical logs: kept up to 12 months, then deleted.
Backups may persist for a limited additional period before being rotated out.
6. Your rights
Under the GDPR you have the right to access, rectify, erase, and receive a portable copy of your data, to restrict or object to certain processing, and to withdraw consent where processing is based on it. Exercise these rights via the contact in the Legal Mentions. Most of them are also available directly in the app (edit profile, delete games, delete account).
You may lodge a complaint with the French supervisory authority, the CNIL, or with the authority of your country of residence.
7. Children
The Service is not directed at children under 15. We do not knowingly collect personal data from children below the age of digital consent applicable in their country.
8. Changes to this policy
We will update this policy as the Service evolves (for example before launching advertising or paid features). The “updated” date above always reflects the current version, and material changes will be announced in the app or on the website.