Privacy policy

The data controller is M. COCHEREL Valentin, who publishes the Site in a personal capacity.

For any question about your data or to exercise your rights: dudo@akroze.com.

• Guest players: the chosen username, and the data of the game in progress (dice, bids, results). No email address or password.
• Registered players: username, email address, password (stored only in hashed form, never in plain text), avatar if you upload one, preferred language, date of registration and of acceptance of the Terms, date of last login and number of logins, chosen bot level, selected cup.
• Game data: games played, rankings, statistics, game history, unlocked cups, friends list and invitations.
• Bug reports: username, email address (if known or entered), title and description of the problem, page of origin, browser used (user-agent) and site language.
• Password reset: a single-use token, valid for one hour.
• Internal activity measurement: technical events (login, registration, start and end of a game…) associated with an anonymous visitor fingerprint, calculated from the IP address and the browser and renewed every day. The IP address itself is not stored.
• Technical server logs (IP address, date, page requested), for security purposes.

• Providing the game (games, account, profile, history, statistics, ranking, friends, cups): performance of the Terms you have accepted (Art. 6(1)(b) GDPR).
• Resetting your password by email: performance of the Terms.
• Handling bug reports and replying to you; the administrator receives an email notification: legitimate interest in fixing the Site (Art. 6(1)(f)).
• Ensuring the security of the Site and combating cheating and abuse: legitimate interest.
• Measuring audience (anonymous internal statistics and Matomo): legitimate interest, as this measurement is exempt from consent under the CNIL's recommendations. You can object to it at any time (section 6).
• Displaying advertising via Google AdSense, which funds the service: your consent (Art. 6(1)(a)), which you can withdraw at any time.
• Complying with our legal obligations (retention of connection data, responding to authorities): legal obligation (Art. 6(1)(c)).

No automated decision producing legal effects is taken about you. The game's bots are merely virtual opponents.

• Guest account: deleted automatically shortly after logging out (checked every hour).
• Registered account and associated game data: as long as the account exists; they are erased as soon as you delete your account. Games already played remain in the other players' history, where you appear as “Deleted player”; your bug reports and activity measurement events are detached from your account.
• Reset token: one hour.
• Bug reports: the time needed to handle them, then one year at most.
• Activity measurement events: 90 days, after which only aggregate, anonymous statistics are kept.
• Technical logs: one year at most.
• Advertising consent choice: 6 months, after which you will be asked again.

Your data is accessible only to the Publisher and, as far as they are concerned, to its service providers:

• the host of the Site, OVH SAS, which stores the data on the Site's server. Emails (password resets, bug notifications) are sent from that same server, with no third-party email provider;
• Matomo, an audience measurement tool installed on that same server (no data is passed on to Matomo's publisher), with IP address anonymisation;
• Google Ireland Limited (Google AdSense), only if you accept advertising. Google may transfer data to the United States, under the EU–US Data Privacy Framework and the European Commission's standard contractual clauses. See how Google uses data from partner sites.

Your username, your avatar, your results and your ranking are visible to other players. Your email address never is.

The Site uses cookies and your browser's local storage:

• session cookie: keeps you logged in during your visit (deleted when the browser is closed) — essential, no consent required;
• “Remember me” cookie: keeps you logged in for a week if you tick the option — essential, no consent required;
• real-time cookie: receives the other players' moves during a game (a few hours) — essential, no consent required;
• local storage: remembers your advertising consent choice (6 months), any objection to audience measurement and your display preferences (3D view, collapsed panels) — essential, no consent needed;
• Matomo cookies (_pk_id, 13 months; _pk_ses, 30 minutes): produce anonymous visit statistics — exempt from consent (anonymised IP address, data kept for 25 months at most, no tracking on other sites), but you can object with the switch below;
• Google AdSense cookies: display and measure ads, which may be personalised — only with your consent.

You can refuse audience measurement with the switch below, change your advertising choice at any time with the “Cookies and advertising” link, and set your browser to block cookies (the game will then no longer work in logged-in mode).

You have the following rights over your data: access, rectification, erasure, restriction of processing, objection (in particular to processing based on legitimate interest), portability, withdrawal of your consent at any time, and setting instructions on what happens to your data after your death.

You can change your username, email address, password and avatar directly from your account. You can also delete your account yourself from “My account”, using the “Delete my account” link: erasure is immediate and permanent. For other requests, write to dudo@akroze.com. We may ask you to confirm your identity, for example by writing from the account's email address. You will receive a reply within one month.

If you believe that your rights are not being respected, you can lodge a complaint with the CNIL (www.cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France) or with the data protection authority of your country of residence.

Exchanges with the Site are encrypted (HTTPS). Passwords are hashed with a robust algorithm and are never readable, not even by the Publisher. Access to the administration area is restricted and protected. As no system is infallible, please choose a unique password for Dudo!.

In France, a minor under 15 cannot consent alone to the processing of their data: they must obtain the consent of a holder of parental authority before creating an account or accepting personalised advertising. Parents can request the deletion of their child's account at dudo@akroze.com.

This policy may change along with the Site or the regulations. The date of the last update appears at the top of the page; in the event of a significant change, registered players will be informed on the Site.