Privacy Policy

1. Data Controller

Lokmer Roméo — Auto-entrepreneur
SIRET : 821 448 719 00020
Email : contact@bugquest.fr

2. Data Collected

a) Contact form
When you use the contact form, your name, email address and message are collected solely to respond to your request. This data is transmitted by email and is not stored in a database.

b) DATA RUN — browser fingerprint (local only)
The DATA RUN game collects technical browser data (GPU renderer, fonts, canvas fingerprint, audio context, battery, hardware concurrency, screen resolution, timezone, etc.) locally in your browser to procedurally generate a unique game level. This data is never transmitted to our servers. It is discarded when you close the game. Its purpose is educational: to demonstrate what any website can collect about your browser without your knowledge.

c) DATA RUN — player account (optional)
Online features (leaderboard, achievements, codex sync) require a player account. When you sign up, the following data is collected: a username (which becomes your leaderboard name), an email address (used exclusively to confirm the account and reset the password — never for marketing, never shared), and a password (stored as an Argon2id hash, never in plain text). Creating an account is entirely optional: the game itself is fully playable without one.

d) DATA RUN — game data linked to the account
If you submit scores, the following is stored and linked to your account: game statistics (score, kills, level, duration), achievements, discovered codex entries, an estimated country of origin (via the Cloudflare CF-IPCountry header — no IP is stored directly), and the game version. This data is kept until you delete your account. Deletion is self-service: the in-game COMPTE menu deletes the account and ALL associated data (scores, achievements, codex) immediately and irreversibly.

e) Server logs
As with any web server, access logs (IP address, date, requested URL, browser) are automatically generated by the hosting infrastructure (Hostinger). These logs are retained for a maximum of 30 days for security purposes.

3. Legal Basis

Data processing is based on: legitimate interest (server logs, security, anti-abuse rate limiting), contractual performance (contact form responses, player account management — email verification, password reset, linked game data), and consent (account creation and score submission, both entirely voluntary).

4. Data Sharing

No personal data is sold or shared with third parties for commercial purposes. The hosting provider (Hostinger) and the CDN/security service (Cloudflare) may process technical data (IP, headers) as part of infrastructure operation.

5. Cookies

This site does not use advertising or analytics cookies. A session cookie (strictly necessary, HttpOnly, SameSite) is set when you log into a DATA RUN player account — it only carries your authentication and expires with the session. Strictly necessary cookies may also be set by the infrastructure (Cloudflare) for security and performance purposes. No third-party tracking scripts are loaded.

6. Your Rights (GDPR)

You have the right to access, rectify, erase, restrict, and port your personal data, as well as the right to object to its processing. Erasure is self-service for DATA RUN accounts: the in-game COMPTE menu deletes the account and all linked data immediately. For any other request, contact: contact@bugquest.fr
You may also lodge a complaint with the CNIL: www.cnil.fr