Privacy policy — CloudOS Architect

This is a translation of the French version. In the event of any discrepancy, the French version prevails.

Person in charge of the protection of personal information

[TO BE COMPLETED : name and title of the person in charge] — confidentialite@cloudos.ca [TO BE COMPLETED : confirm the address]. In accordance with the Act respecting the protection of personal information in the private sector (Québec, Law 25), you can contact them with any question or request.

Information collected

Account: username, email address, password (stored with irreversible encryption), preferences.
Game: your game saves, stats and achievements.
Purchases: item, amount, PayPal transaction identifiers and payer email. We never receive your banking details.
Contact and newsletter: name, email and message; newsletter sign-up with double opt-in.
Internal audience measurement: anonymous events (page views, clicks on “Play”, sign-up steps) tied to a random visit identifier kept for the duration of the tab, and the source of the visit (UTM parameters). No IP address is stored in clear text and no data is shared with an advertising third party.

Purposes

Providing the game and your saves, managing your account, processing your purchases and invoices, keeping the leaderboard secure and fair, answering your requests, sending you the newsletter if you asked for it, and improving the site.

Cookies

We use a single, strictly necessary cookie: the session cookie that keeps you signed in (30 days). No advertising or third-party tracking cookie is used.

Disclosure to third parties

PayPal (payments), our host [TO BE COMPLETED : name and country of the host] and our email server. Some may process data outside Québec; we make sure it is adequately protected.

Retention

Account data is kept as long as the account exists. Invoices are kept for our accounting and tax obligations, and anonymized if you delete your account. Audience measurement events are deleted after 90 days.

Your rights

Access, correction, portability, withdrawal of consent and deletion. From your settings, you can export all your data and delete your account. You can also file a complaint with the Commission d'accès à l'information du Québec.

Security

Encrypted connections (HTTPS), hashed passwords (bcrypt), revocable sessions, audit log of administration actions.

Minors

The service is intended for people aged 14 and over. [TO BE COMPLETED : minimum age and parental consent rules]

Information collected

Account: username, email address, password (stored with irreversible encryption), preferences.

Game: your game saves, stats and achievements.

Purchases: item, amount, PayPal transaction identifiers and payer email. We never receive your banking details.

Contact and newsletter: name, email and message; newsletter sign-up with double opt-in.

Internal audience measurement: anonymous events (page views, clicks on “Play”, sign-up steps) tied to a random visit identifier kept for the duration of the tab, and the source of the visit (UTM parameters). No IP address is stored in clear text and no data is shared with an advertising third party.