Privacy Policy
Last updated: 2026-05-28
1. Introduction
This Privacy Policy explains how Animedle ("we", "us") collects, uses and protects your personal data. We respect your privacy and apply the principles of the EU General Data Protection Regulation (GDPR).
2. Data controller
Mathis Lorenzo, contact: contact@animedle.eu.
3. What we collect
- Account data: email, optional display name, encrypted password (managed by Supabase Auth).
- Gameplay data: your guesses, attempts and streaks, attached to your user ID.
- Technical data: IP address (transiently, for security), user agent, language preference.
- Analytics data: aggregated page views, click events, anonymous session recordings via PostHog. PostHog is configured to attach persistent profiles only to authenticated users.
- Advertising data: Google AdSense may set its own cookies — see our Cookie Policy.
4. Legal basis
We rely on:
- Contract to provide the Service when you create an account;
- Consent for personalized advertising (collected via our CMP, Google Funding Choices);
- Legitimate interest for security, anti-abuse, and basic functional usage.
5. How we use your data
- Operate the game (save your streaks across devices).
- Detect abuse and protect the Service.
- Measure usage and improve the product (analytics with anonymized profiles for unauthenticated users).
- With consent: serve relevant advertising.
6. Sharing
- Supabase (hosting, auth, database) — data stored in the EU.
- PostHog (analytics) — analytics platform; profiles persist only for authenticated users.
- Google AdSense (advertising) — see Google's privacy policy at policies.google.com/privacy.
- Resend (transactional email) — for password resets and similar.
We do not sell your data.
7. Retention
Account data is kept while your account exists. You can request deletion at any time. Analytics data is retained for up to 12 months.
8. Your rights
Under GDPR you have the right to access, rectify, erase, restrict, port and object to the processing of your personal data. Exercise any right by emailing contact@animedle.eu. You can also lodge a complaint with the French Data Protection Authority (CNIL).
9. Cookies
See our dedicated Cookie Policy.
10. Children
The Service is not directed at children under 13 (16 in the EEA). We do not knowingly collect data from minors below that age.
11. International transfers
Some sub-processors (e.g. Google) may transfer data outside the EU under Standard Contractual Clauses.
12. Security
Passwords are hashed by Supabase Auth. Connections use HTTPS. We follow the principle of least privilege for our database.
13. Changes
We may update this Policy. Material changes will be announced.