Privacy & cookie policy

This page describes the data we process, the cookies used and how Site traffic is measured. Traffic goes through a CDN (Cloudflare) that produces aggregated technical statistics (volume, request country of origin) without marketing analytics cookies. To fund the service, Google AdSense ads may be shown to non-subscribers, after consent where required by law (EEA, United Kingdom, Switzerland).

1. Data controller

The data controller is the Site's publisher (see legal notice).

2. Data collected and purposes

Data	When	Purpose	Legal basis
E-mail address	At sign-up (or via Google)	Create and secure the account, reset the password	Performance of the contract
Password (encrypted)	At sign-up	Authentication	Performance of the contract
Username	At sign-up	Identify you in the game and (if enabled) on your public profile	Performance of the contract / consent (public profile)
Google identifier	Sign-in via Google	Enable Google sign-in	Consent
Game history (games, scores, XP, streaks)	While playing signed in	Provide the service and track your progression	Performance of the contract
Billing data (where applicable)	When subscribing	Manage the subscription and meet accounting obligations	Performance of the contract / legal obligation
Advertising-related data (ad identifiers, consent, ad measurement)	When ads are shown (non-subscribers)	Serve ads, measure performance, and personalize ads where allowed	Consent (EEA / United Kingdom / Switzerland); legitimate interest or equivalent outside those areas under local law

Arkadix does not sell your data. Ads are served by Google AdSense for non-subscribers only; a subscription removes ads.

3. Cookies and local storage

Arkadix uses the following cookies and storage:

Cookie / storage	Type	Role	Consent required?
Session cookie	Strictly necessary	Authentication and game flow	No (exempt)
palette	Functional	Remember your color theme	No
units	Functional	Remember your measurement unit	No
glow	Functional	Remember the visual-effects setting	No
Language (in session)	Functional	Remember your language	No
Google AdSense cookies and storage	Advertising / measurement	Serve ads, measure impressions and clicks, and personalize ads where allowed	Yes (EEA / United Kingdom / Switzerland) via the Google consent banner

Preference and session cookies are first-party and are not used for advertising. Advertising cookies are set by Google when ads are active. You can manage consent via the banner when shown, and delete cookies in your browser settings.

Technical CDN statistics (without marketing tracking cookies) remain distinct from advertising cookies. For how Google processes data as an advertising partner: policies.google.com/technologies/partner-sites.

4. Audience measurement

Site traffic is measured with a self-hosted tool, without cookies or persistent identifiers. What is recorded: the page viewed, the browser, the operating system, the device type, plus the country and city derived from the IP address, which is not kept. This data is not linked to any account, nor shared with any third party.

5. Data recipients

• The Site's hosting provider (technical storage): see legal notice.
• Cloudflare, Inc. (CDN / traffic protection, technical logs and aggregated statistics; R2 object storage for universe images and database backups).
• Google (when you sign in via Google): authentication.
• Google (AdSense and related services): serving and measuring ads for non-subscribers, according to your consent.
• Payment provider (where applicable, for subscriptions).

No other commercial recipients. Arkadix does not sell your data.

6. Retention period

• Account and game data: kept as long as the account exists.
• After account deletion: associated data (games, progression, streaks) is deleted by cascade. Some billing data may be kept for the legal period.

7. Public profile

Your profile is public by default: your username, levels, game statistics, titles and the date of your first game are visible to anyone via a public link. You can hide it at any time (the "Public profile" option in your settings); it is deleted along with your account in any case.

8. Your rights (GDPR)

You have the rights of access, rectification, erasure, portability, restriction and objection regarding your data.

• your account.
• To exercise the other rights, write to the contact address.
• You may lodge a complaint with the French data authority, the CNIL (www.cnil.fr).

9. Security

Passwords are stored encrypted and exchanges with the Site are secured (HTTPS).

10. Changes

This policy may change. The last-updated date is shown at the top of the page.