Privacy policy
What UniOra collects, why, for how long, and how to take back control of it. No advertising, no advertising identifier, no resale.
Who processes your data
The data controller is LE RENDEZVOUS LOGIC, a French simplified joint-stock company (SAS) registered with the Thonon-les-Bains Trade and Companies Register under number 890 296 908, with its registered office at 6 rue du Parc, Blue Business Building, 74100 Annemasse, France.
For any question about your data, write to contact@uniora.games.
The principle we hold ourselves to
UniOra collects only what a feature needs. The game carries no advertising and collects no advertising identifier. Your data is not sold, rented or passed on to data brokers.
What is collected
| Data | Why | Legal basis | Retention |
|---|---|---|---|
| Email address | Sign-in, account recovery | Performance of the contract | Lifetime of the account |
| Password (hashed, never readable) | Authentication | Performance of the contract | Lifetime of the account |
| Username and nation | Display on the leaderboard | Performance of the contract | Lifetime of the account |
| Times, open universes, game traces | Leaderboard and time validation | Contract + legitimate interest (fair play) | Lifetime of the account, traces 90 days |
| Device identifier (hashed) | Detection of multiple accounts | Legitimate interest (fair play) | 12 months |
| Crash reports | Fixing faults | Legitimate interest (stability) | 12 months |
| Notification token | Push notifications | Consent | Until withdrawn |
| Audience measurement | Site traffic | CNIL exemption (anonymous audience measurement) | 13 months |
Date of birth is not requested: only an age declaration is collected at sign-up.
Underage players
UniOra is aimed at a family audience. In France, consent-based processing of the data of a minor under 15 requires the agreement of a parent or guardian.
An age declaration is requested at sign-up. Under 15, a parent's email address is required, and marketing notifications and audience measurement are switched off by default.
A parent may at any time request access to, rectification of, or erasure of their child's data by writing to contact@uniora.games.
Processors and recipients
| Provider | Role | Location |
|---|---|---|
| OVH SAS | Hosting of servers and backups | France (Gravelines, Strasbourg) |
| Brevo | Sending service emails | European Union |
| [Self-hosted Matomo — TO BE CONFIRMED] | Audience measurement | France (our own server) |
| [Expo — TO BE CONFIRMED] | Delivery of push notifications | United States |
| Apple and Google | App distribution, notification service | United States |
[TO BE COMPLETED if Firebase Analytics is used instead of Matomo: prior consent becomes mandatory and a consent banner must be put in place.]
Transfers outside the European Union
Delivering push notifications and distributing the apps involves providers established in the United States. These transfers rely on the European Commission's standard contractual clauses and, where applicable, on the EU–US Data Privacy Framework.
Account and game data, for their part, never leave servers located in France.
Cookies and trackers
The site uses no advertising cookies and no third-party trackers. Fonts are hosted on our own servers: no request is made to any third-party domain when you browse.
Audience measurement is configured to meet the CNIL's exemption criteria — truncated IP address, no cross-referencing between services, no browsing tracking — and therefore requires no prior consent.
Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to set instructions for what happens to your data after your death.
- Delete your account — directly in the app, under Account. Deletion is permanent and takes your recorded times with it.
- Exercising your other rights — in writing to contact@uniora.games. We reply within one month, extendable by two months for complex requests.
- Complaint — to the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or at cnil.fr.
The username and time appearing on a public leaderboard may be kept in anonymised form after account deletion, in order to preserve the historical integrity of the rankings.
Security
Passwords are stored hashed. Traffic between the app and our servers is encrypted. Backups are encrypted and kept in France, with a thirty-day retention period.
In the event of a data breach likely to result in a high risk to your rights, you will be informed in accordance with Article 34 GDPR.
Changes
This policy may change. Any substantial modification is flagged in the app and on this page, with a new update date.
Last updated: 5 August 2026