Privacy policy

Data collected

Through the contact form, we only collect the data you send us: name or username, email address, subject and message content. This data is transmitted to our Discord server, where your request is handled as a ticket.

If you create a customer account, we keep your username, email address, your password (stored hashed, never in plain text or reversible) and the history of your orders, licenses and downloads — necessary to provide the service.

If you log in via Google or Discord, these services provide us with your ID, email address, username and avatar, used solely to create and secure your account.

Payment is processed directly by our provider Stripe. We never have access to your card number or your full banking details.

Use of data

Your data is never resold or shared with third parties for commercial purposes. It is only used to respond to your requests, manage your orders, provide support and prevent fraud.

Service providers and subcontractors

Certain data is transmitted to technical providers strictly necessary for the operation of the service: Stripe (payment), Hostinger (site hosting), MongoDB Atlas (database hosting: accounts, orders, licenses), Wispbyte (Discord bot hosting, which accesses the same data for order management and support), as well as Google and Discord (login and technical support). These providers only use your data for the performance of their own task. If transactional email sending (order confirmation) is enabled, it goes through a dedicated third-party SMTP provider.

Transfers outside the European Union

Some of our technical providers (Stripe, Google, Discord, MongoDB Atlas in particular) are based or process data outside the European Union, notably in the United States. These transfers are governed by safeguards recognized by European regulations — European Commission standard contractual clauses, or an adequacy decision where applicable — ensuring an adequate level of protection for your personal data.

Cookies

This site uses no tracking or advertising cookies. Only technical cookies strictly necessary for operation (login session, cart) are used.

Your rights (GDPR)

In accordance with the General Data Protection Regulation, you have the right to access, rectify, erase, restrict and port your personal data, as well as a right to object. To exercise these rights, contact us at contact@gamefinds.fr.

If, after contacting us, you believe your rights are not being respected, you also have the right to lodge a complaint with the French data protection authority (CNIL): www.cnil.fr.

Security

Your passwords are stored hashed (bcrypt) — irreversible, never in plain text — and all exchanges with the site are secured via the HTTPS protocol.

Retention period

Data from the contact form is kept for a maximum of 1 year after the last exchange. Account data is kept as long as the account is active.

Data related to your orders and invoices is kept for 10 years after the transaction, including after deletion of your account, in accordance with our legal obligations regarding the retention of accounting documents.