Privacy Policy

Your privacy matters. This policy explains what data Bogey Labs collects, why, and how it is used.

Data Controller

Bogey Labs is operated by Damien Riquet. For privacy-related questions or requests, contact us at: contact [at] bogeylabs [dot] com

What We Collect

• Account data: When you register, we store your email address, display name, and a hashed password. This information is used solely to provide your account and personalize your experience.
• Game data: When you play a game, we record whether you won, how many guesses you used, and the date. This data is used to generate aggregate daily statistics shown to all players.
• Cookies: We use a single essential session cookie (bogeylabs_auth) to keep you logged in. No third-party tracking cookies are used.

What We Don't Collect

We do not sell your data. We do not use advertising networks. We do not share your personal information with third parties except as described below or as required by law.

Legal Basis for Processing

We process your personal data based on the following grounds:

• Contractual necessity: to create and manage your account and provide core features.
• Legitimate interest: to generate aggregate, anonymized game statistics.
• Essential operation: the session cookie is strictly necessary to provide the service and does not require your consent.

Your Rights

Under applicable data protection law (including GDPR), you have the right to:

• access the personal data we hold about you
• correct inaccurate or incomplete data
• request deletion of your data
• restrict or object to certain processing
• request portability of your data in a machine-readable format

To exercise any of these rights, contact us at the address listed above. You also have the right to lodge a complaint with the relevant data protection authority. In France, this is the CNIL (Commission Nationale de l'Informatique et des Libertés): cnil.fr.

Data Retention

You may delete your account at any time from your profile page. Deleting your account removes your email, display name, and password. Anonymized game records (wins/losses with no link to any user) may be retained for aggregate statistics; they cannot be used to identify individuals.

Data Storage and Security

Your data is stored on secure servers and protected using appropriate technical and organizational measures. We limit data collection to what is strictly necessary.

Third-Party Services

To operate the service, your data may be processed by the following infrastructure providers:

• Scaleway (EU): Virtual private server hosting the application and its data.
• Porkbun (US): Domain name registration and transactional email delivery (e.g., registration confirmation). As a US-based provider, data transfers are subject to standard contractual clauses or equivalent safeguards under GDPR.

No other third-party services receive your personal data.