Privacy policy
Last updated: 16 October 2026. This policy applies to the Frappe ! mobile app (Android and iOS) and to the frappe-app website.
This is an English translation of the Politique de confidentialité, provided for convenience. In case of any discrepancy, the French version prevails.
1. Who is responsible
The data controller is the publisher of Frappe !, Hugo Dindin, individual publisher (a company will take over publishing the app before any revenue is collected; this page will then be updated). Contact: frappe.appm2l@gmail.com.
2. What we collect, and why
To run the game (performance of the service)
- An anonymous account identifier, created automatically on first launch. No sign-up is required to play.
- Your e-mail address, only if you choose to link your collection to find it on another device. It is used to send you the sign-in code, nothing else.
- Your game data: coins owned, balance in Frappes (₣), factory level, packs opened, designed coins, friends, trades, reports and blocks. These data are stored on our servers (Supabase, hosted in the European Union) so that your collection is saved and can be restored.
- An optional engraver name, visible to your friends and on the coins you design.
- A country indicator for paid packs: the randomly drawn packs sold for ₣ are not offered where the law forbids them (Belgium). For this, the app tells the server whether the region, language or time zone of the phone points to such a country, and the store (via RevenueCat) sends us the country of your App Store or Google Play account. Only this store country and, where applicable, the signal that blocks packs (for example « region: BE ») are kept, nothing else about your location.
To measure audience (legitimate interest, can be switched off)
- Anonymous audience measurement (PostHog, servers in the European Union): screens and actions in the game (packs opened, coin pages read, errors encountered), device model and system version. It is used only for our own statistics: no profile, no link with your game account, no advertising identifier, no recording of the screen or of what you type, no geolocation, no resale. It relies on a random identifier specific to the app, renewed every 13 months; statistics are kept for 12 months. It is designed for the consent exemption provided by the CNIL (the French data protection authority) for audience measurement, and you can switch it off at any time: Settings → « Anonymous audience measurement » (nothing more is sent once the option is off).
- Crash reports (Sentry, coming in the published version): technical trace of the error, with no personal content.
For optional features
- Rewarded videos (Google AdMob): shown only when you press a button that states the reward; no advertising is forced. Before the first video, Google's consent request is shown to you (which you can change later in Settings → « Ad choices »). By default, ads are not personalised: they only become so if you accept in this request (and, on iPhone, if you allow tracking). To check that a video has really been watched, Google sends us a confirmation containing the identifier of your game account, a transaction number and a single-use code; we keep it so that a reward is not granted twice.
- In-app purchases (Google Play, App Store, via RevenueCat): payment is handled by the store; we never see your bank details. RevenueCat sends us the state of the purchase: product, transaction number, price and currency, environment (test or real) and country of the store account. We keep neither your name nor your store e-mail.
- Notifications: at most one a day without action on your part, only if you allow them.
- Coin scanner: paused since 15 October 2026. The feature is not offered in the app: no photo is sent or analysed. If it comes back, this page will be updated first.
3. What we do not do
- We neither sell nor rent your data.
- We show no advertising without your action and do no advertising profiling ourselves.
- There is no messaging between players: only an engraver name, a coin legend and trade offers are exchanged, and they are filtered.
- Frappe ! is intended for people aged 16 and over (PEGI 16 rating, see the terms of use), above the age of 15 from which one can consent alone to the processing of one's data in France. The app asks for neither age nor identity, and we do not knowingly collect data from younger people.
4. How long
Your game data are kept for as long as your account exists. An anonymous account inactive for 24 months is deleted. Usage statistics are kept for 12 months. Moderation and report logs are kept for 12 months after the account is closed, for the safety of other players.
5. Your rights
- Export all your data: Settings → Export my data (JSON file).
- Delete your account: Settings → Delete my account. Deletion is immediate and irreversible: collection, balance, factory, friends, trades, recorded purchases and country indicator are erased. Coins you have designed that other players own stay in their album, without your name.
- Correct your engraver name or your e-mail from the app.
- Refuse audience measurement (Settings → « Anonymous audience measurement »), notifications, and change your advertising choices (Settings → « Ad choices »).
- Restore your purchases on a new device: Shop or Settings → « Restore my purchases ».
For any other request (access, objection, portability) or complaint, write to us at frappe.appm2l@gmail.com. You can also refer the matter to the CNIL (cnil.fr).
6. Processors
| Service | Role | Location |
|---|---|---|
| Supabase | Database, authentication | European Union |
| Expo (EAS) | Distribution of app updates | United States (standard contractual clauses) |
| PostHog | Anonymous audience measurement (can be switched off) | European Union |
| Google AdMob | Rewarded videos (on action, not personalised by default) and their verification | As set by Google |
| RevenueCat, Apple, Google | In-app purchases | United States / depending on the store |
7. Changes
Any substantial change is announced in the app before it takes effect. The version history of this page is public in the project's repository.