Privacy policy
Last updated : May 14, 2026
At Craft Your Games, we take the protection of your personal data seriously. This policy describes in full transparency what data we collect, for what purpose and what rights you have under the law. General Data Protection Regulation (GDPR).
Summary
1. Treatment Officer
The person responsible for processing your data is:
- Essentials (mark Craft Your Games)
- Brittany, France
- GDPR Contact: joeffrey@ecoessentials.fr
2. Data collected
We collect only the data strictly necessary for the purpose pursued. At no time do we ask you for sensitive information (health, political opinions, religion, etc.).
| Source | Data collected |
|---|---|
| Contact form | Company, address, postal code, city, email, phone, your request, attached files (brief, mock-ups...) |
| Newsletter (optional) | Email only |
| Server Logs | IP address, user-agent, visited pages, time stamping (anonymized within 30 days) |
| Google Analytics | Anonymised usage data (no user ID, truncated IP) |
3. Purposes of the treatment
- Responding to your commercial request (vis, draft, question)
- Managing the customer relationship (exchanges, project monitoring, delivery)
- Inform you on a timely basis news if you have registered to our newsletter
- Improving the site via anonymous audience statistics
- Secure the site against abuse (rate limiting, anti-bot)
4. Legal basis
- Consent (Article 6.1.a GDPR): for newsletter and analytical cookies
- Pre-contractual measures (Article 6.1.b GDPR): to process your request for quotation
- Legitimate interest (Article 6.1.f GDPR): for site security and UX improvement
5. Shelf life
| Data type | Duration |
|---|---|
| Unconverted contact requests | 3 years from last contact |
| Customer data (commercial relationship) | Throughout the relationship + 5 years (accounting obligation) |
| Newsletter | Until unsubscribe |
| Technical Logs | 30 days |
| Analytical cookies | Maximum 13 months |
6. To which the Parties
Your data is accessible only by:
- The members of the Craft Your Games team (Joeffrey, Killian, Johanna, Patricia)
- Our Host Vercel (technical storage)
- Our email provider Infomaniak (Switzerland, GDPR certified)
- Where appropriate, the judicial authority upon request
We do not sell, rent or share your data for commercial purposes.
7. Your GDPR rights
In accordance with the GDPR, you have the following rights:
- Right of access : get a copy of your data
- Right of rectification : correct inaccurate information
- Right to erasure ("right to forget") : delete your data
- Right to limitation of treatment
- Right to portability : receive your data in a structured format
- Right of opposition : refuse treatment
- Right to withdraw your consent at any time
To exercise these rights, contact us at joeffrey@ecoessentials.fr We'll be answering within 30 days.
8. Security
We implement appropriate technical and organizational measures to protect your data:
- HTTPS quote (TLS 1.3) on the entire site
- Strict safety heads (CSP, HSTS, X-Frame-Options)
- Rate limiting on the contact form (5 shipments/hour/IP)
- Honeypot Anti-bot
- HMAC encrypted admin sessions, HttpOnly cookies
- Passwords stored with secure hash
- Daily backups
9. Cookies
Our website uses a limited number of cookies:
| Cookie | Purpose | Duration |
|---|---|---|
| Administrative session | CMS authentication | Session |
| _ga (Google Analytics) | Anonymized hearing action | 13 months |
No advertising cookie or profiling is filed. You can configure your browser to block cookies at any time.
10. Claim to CNIL
If you consider that your rights are not respected, you can file a complaint with the CNIL (National Commission for Information Technology and Freedoms):
- 3 Place de Fontenoy, TSA 80715, 75334 PARIS CEDEX 07
- Tel.: 01 53 73 22 22
- Site: www.cnil.fr