Privacy Policy
Last updated: March 4, 2026
1. Introduction
This Privacy Policy describes how your personal data is collected, used, stored, and protected when you use the SongTrivia application (hereinafter "the Application"), published by:
- Company: SAS (Societe par Actions Simplifiee)
- SIREN: 849 692 371
- SIRET: 849 692 371 00016
- VAT Number: FR60849692371
- Registered office: 92 Cours Lafayette, 69003 Lyon, France
- Website: https://www.songtrivia2.io
- Data Protection Contact: julien@anthm.fr
The Application is available on iOS, Android, and the Web (https://www.songtrivia2.io). By using the Application, you agree to the collection and use of your data as described in this Privacy Policy.
This Privacy Policy complies with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the French Data Protection Act (Loi Informatique et Libertes), the ePrivacy Directive, and the California Consumer Privacy Act ("CCPA") where applicable.
2. Data Controller
The data controller is:
- SAS — SIREN 849 692 371
- 92 Cours Lafayette, 69003 Lyon, France
- Represented by: Julien ANCEL
- Contact: julien@anthm.fr
3. Data We Collect
3.1 Data You Provide Directly
When you create an account or use the Application, we may collect:
- Email address (required for account creation)
- Username / pseudo (required)
- Profile picture / avatar (optional)
3.2 Data Collected Automatically
When you use the Application, we may automatically collect:
- Device information: device type, model, operating system and version, screen resolution, language settings, unique device identifiers
- Log data: IP address, access dates and times, pages or screens viewed, app crash reports, referral URLs
- Usage data: game sessions, scores, modes played, features used, session duration, in-app actions and interactions
- Advertising identifiers: IDFA (iOS) and GAID (Android), subject to your consent where required
- Approximate location: derived from IP address (country/region level only; we do not collect precise geolocation)
3.3 Data Collected by Third-Party SDKs
The Application integrates third-party software development kits (SDKs) that may collect data independently:
- Playwire (advertising): may collect device identifiers, IP address, ad interaction data, and browsing behavior for targeted advertising. Privacy policy: https://www.playwire.com/privacy-policy
- Google Analytics: collects usage data, device information, and interaction events for analytics purposes. Privacy policy: https://policies.google.com/privacy
- PostHog: collects usage data, feature interactions, and session data for product analytics. Privacy policy: https://posthog.com/privacy
3.4 Payment Data
Transactions are processed by Apple (App Store), Google (Google Play), or the applicable payment processor for web purchases. We do NOT collect or store your full credit card or payment information. We only receive transaction confirmations, subscription status, and purchase history.
4. Purposes and Legal Basis for Processing
We process your personal data for the following purposes:
| Purpose | Legal Basis | |---------|-------------| | Account creation and management | Performance of a contract (Art. 6(1)(b) GDPR) | | Providing the game service | Performance of a contract (Art. 6(1)(b) GDPR) | | Managing subscriptions and purchases | Performance of a contract (Art. 6(1)(b) GDPR) | | Displaying advertisements | Consent (Art. 6(1)(a) GDPR) | | Personalizing ad content | Consent (Art. 6(1)(a) GDPR) | | Analytics and service improvement | Legitimate interest (Art. 6(1)(f) GDPR) | | Preventing fraud and abuse | Legitimate interest (Art. 6(1)(f) GDPR) | | Responding to user requests and support | Performance of a contract (Art. 6(1)(b) GDPR) | | Compliance with legal obligations | Legal obligation (Art. 6(1)(c) GDPR) | | Sending promotional communications | Consent (Art. 6(1)(a) GDPR) |
For processing based on legitimate interest, we have conducted a balancing test to ensure our interests do not override your fundamental rights and freedoms. You may object to such processing at any time (see Section 9).
5. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Account data (email, username, avatar): Retained for the duration of your account. Deleted within 30 days of account deletion, unless longer retention is required by law.
- Usage and game data: Retained for 3 years from the date of collection or your last interaction with the Application.
- Transaction and billing data: Retained for 10 years from the transaction date, in compliance with French accounting and tax obligations.
- Advertising identifiers: Retained for a maximum of 13 months from collection, in compliance with CNIL guidelines.
- Log data (IP addresses, access logs): Retained for a maximum of 12 months.
- Analytics data (Google Analytics, PostHog): Retained for a maximum of 26 months.
6. Data Sharing
We may share your personal data with the following categories of recipients:
6.1 Service Providers (Data Processors)
- Hosting: Vercel Inc. (Walnut, CA, USA) — https://vercel.com/legal/privacy-policy
- Analytics: Google Analytics (Google LLC) — https://policies.google.com/privacy
- Analytics: PostHog Inc. — https://posthog.com/privacy
- Payment processors: Apple Inc., Google LLC (for in-app purchases), and applicable web payment processors
6.2 Advertising Partners
- Playwire LLC — https://www.playwire.com/privacy-policy
Playwire and its demand partners may act as independent data controllers for the data they collect through the Application. Playwire may share data with its demand partners for the purpose of delivering targeted advertising. Please refer to Playwire's privacy policy for details on their data practices and the list of their demand partners.
6.3 Legal Requirements
We may disclose your data if required by law, court order, or governmental authority, or if disclosure is necessary to protect our rights, property, or safety, or the rights, property, or safety of others.
6.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity. You will be notified of any such transfer.
We do NOT sell your personal data to third parties.
7. Advertising and Tracking
7.1
The Application displays advertisements provided by Playwire and its demand partners. These advertising networks may use advertising identifiers, device information, and similar technologies to collect information about your activity within the Application and across other apps and websites, in order to display targeted advertisements.
7.2 Apple App Tracking Transparency (iOS)
On iOS (version 14.5 and later), the Application complies with Apple's App Tracking Transparency (ATT) framework. You will be prompted for your consent before any tracking across apps or websites occurs. If you deny tracking:
- You will still see advertisements, but they will not be personalized based on cross-app tracking.
- You can change your tracking preferences at any time: Settings > Privacy & Security > Tracking.
7.3 Google Advertising Controls (Android)
On Android, you can opt out of personalized advertising:
- Settings > Google > Ads > Opt out of Ads Personalization
- Note: Starting with Android 13, the advertising ID is automatically set to zeros if the user opts out.
7.4 Web Cookies and Tracking
On the web (https://www.songtrivia2.io), we use cookies and similar technologies subject to your consent through our cookie consent banner. You can manage your cookie preferences at any time through the cookie settings accessible from the Application footer.
7.5 Do Not Track
The Application does not currently respond to "Do Not Track" browser signals. However, you can manage your tracking preferences through the mechanisms described above.
8. International Data Transfers
Your data may be transferred to, and processed in, countries outside the European Economic Area (EEA), in particular the United States, when using services from the following providers:
- Vercel Inc. (hosting) — United States
- Google LLC (analytics, payments) — United States
- PostHog Inc. (analytics) — United States
- Playwire LLC (advertising) — United States
- Apple Inc. (payments) — United States
In such cases, we ensure that appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission (Decision 2021/914)
- The EU-US Data Privacy Framework, where the recipient is certified
- Other safeguards as required by applicable law
You may request a copy of the safeguards in place by contacting us at julien@anthm.fr.
9. Your Rights
9.1 Rights Under GDPR (EU/EEA Users)
Under the GDPR and French data protection law, you have the following rights:
- Right of access: Request a copy of the personal data we hold about you.
- Right to rectification: Request correction of inaccurate or incomplete data.
- Right to erasure ("right to be forgotten"): Request deletion of your data, subject to legal retention obligations.
- Right to restriction: Request that we restrict processing of your data in certain circumstances.
- Right to data portability: Request to receive your data in a structured, commonly used, machine-readable format (JSON or CSV).
- Right to object: Object to processing based on legitimate interest, including profiling for direct marketing.
- Right to withdraw consent: Where processing is based on consent (e.g., advertising, promotional emails), withdraw your consent at any time without affecting the lawfulness of prior processing.
- Right not to be subject to automated decision-making: We do not use automated decision-making that produces legal effects concerning you.
- Right to lodge a complaint: File a complaint with the French data protection authority (CNIL) at https://www.cnil.fr or by post: CNIL, 3 Place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07, France.
9.2 Rights Under CCPA (California Residents)
If you are a California resident, you have the following additional rights under the CCPA:
- Right to know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
- Right to delete: Request deletion of your personal information.
- Right to opt out of sale: We do NOT sell your personal information. If this changes, we will provide a "Do Not Sell My Personal Information" link.
- Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.
9.3 How to Exercise Your Rights
To exercise any of your rights, contact us at: julien@anthm.fr
You may also delete your account directly from the Application settings.
We will respond to your request within 30 days (GDPR) or 45 days (CCPA). We may ask for proof of identity before processing your request.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including:
- Encryption of data in transit (TLS/SSL)
- Encryption of data at rest where applicable
- Access controls and authentication measures
- Regular security assessments
- Limited access to personal data on a need-to-know basis
- Secure development practices
Despite our efforts, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security of your data. In the event of a data breach affecting your personal data, we will notify you and the relevant supervisory authority as required by applicable law.
11. Children's Privacy
- The Application is not directed at children under the age of 16 in the EU/EEA or under the age of 13 in the United States.
- We do not knowingly collect personal data from children under these age thresholds without verifiable parental consent.
- If you are a parent or guardian and believe your child has provided personal data to us, please contact us at julien@anthm.fr. We will take steps to delete such data within 30 days.
- In compliance with Apple's App Store Guidelines and Google Play Families Policy, if the Application is found to be used by children under the applicable age, we will take immediate steps to cease data collection and delete any data already collected.
12. Cookies and Similar Technologies
The web version of the Application (https://www.songtrivia2.io) uses cookies and similar technologies (local storage, pixels). The mobile versions use SDK-based tracking technologies that function similarly to cookies.
Types of cookies and technologies used
Strictly Necessary:
- Session management, authentication, security tokens
- Cannot be disabled; no consent required
Analytics (subject to consent):
- Google Analytics: usage patterns, page views, session data
- PostHog: feature usage, user journeys, product analytics
Advertising (subject to consent):
- Playwire SDK/cookies: ad delivery, frequency capping, ad performance measurement
- Playwire demand partner cookies: targeted advertising, audience segmentation
Managing your preferences
- Web: Cookie consent banner and cookie settings accessible from the Application footer
- iOS: Settings > Privacy & Security > Tracking (for cross-app tracking)
- Android: Settings > Google > Ads (for ad personalization)
In compliance with CNIL guidelines:
- Cookies subject to consent are NOT placed until you have given your explicit consent
- Consent is collected via a clear and accessible cookie banner
- Cookies and consent records are retained for a maximum of 13 months
- You can withdraw your consent at any time
13. Apple and Google Platform Requirements
13.1 Apple App Store (App Privacy Details / "Nutrition Labels")
In compliance with Apple's requirements, we disclose the following data collection in our App Store listing:
Data linked to you:
- Contact Info: email address
- Identifiers: user ID (pseudo)
Data not linked to you:
- Usage Data: product interaction, game scores
- Diagnostics: crash data, performance data
Data used to track you (subject to ATT consent):
- Identifiers: advertising ID (IDFA)
13.2 Google Play (Data Safety Section)
In compliance with Google Play's Data Safety requirements:
Data collected:
- Personal info: email address, user name
- App activity: game sessions, in-app actions, app interactions
- Device or other IDs: device identifiers, advertising ID
Data shared with third parties:
- Device or other IDs: shared with Playwire for advertising purposes
Security practices:
- Data is encrypted in transit
- You can request that data be deleted
- Data collection follows our published privacy policy
14. Third-Party Links
The Application may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal data.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting a notice in the Application
- Sending an email to registered users (for material changes)
- Updating the "Last updated" date at the top of this document
The updated Privacy Policy will take effect on the date indicated at the top of the document. Your continued use of the Application after the effective date constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, you should stop using the Application and delete your account.
16. Contact
For any questions or requests regarding this Privacy Policy or your personal data, contact us at:
- Email: julien@anthm.fr
- Address: 92 Cours Lafayette, 69003 Lyon, France
- Website: https://www.songtrivia2.io
For complaints regarding data protection, you may also contact the CNIL:
- Website: https://www.cnil.fr
- Address: CNIL, 3 Place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07, France