Privacy policy

Last updated: 1 November 2026

Who are we?

The yggame.fr website is published by Yggame, a non-profit association (French law of 1901) registered in 2024 and based in Montpellier (34000), France. Yggame is the data controller for the personal data collected through this website. The website's publisher is listed in the legal notice.

For any question about your personal data: contact@yggame.fr.

What data do we collect?

Contact form

The contact form collects:

  • your full name;
  • your email address;
  • your organisation / company (optional field);
  • the type of project;
  • your message.

No visitor account, no newsletter sign-up, no collection of browsing data for advertising or statistical purposes.

Technical data (logs)

Like any website, the server records in its technical logs the IP address, date and time, requested page, browser ("user-agent") and response code of each visit. The contact form also uses your IP address temporarily (less than an hour) to limit the number of messages and block bots.

Accounts of the site's contributors

The volunteers who manage the site's content have an account in the administration tool (Sulu): username, name, email address, password (stored with irreversible encryption), two-factor authentication codes sent by email and, if they so choose, a "trusted device" cookie valid for 30 days. An activity log keeps track of changes made in the administration (who, what, when), and login attempts are logged (username entered and IP address) for security.

Why, and on what legal basis?

  • Contact form: answering your request (information, service request, partnership). Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and, for general requests, the association's legitimate interest in answering the people who contact it (Art. 6(1)(f) GDPR). This processing is not based on your consent: no checkbox is therefore required, this notice serves as information.
  • Technical logs and message limiting: website security, detecting and blocking abuse, troubleshooting. Legal basis: the association's legitimate interest in protecting its website (Art. 6(1)(f) GDPR).
  • Contributor accounts, two-factor authentication and activity log: managing access to the administration and ensuring its security and traceability. Legal basis: the association's legitimate interest (Art. 6(1)(f) GDPR).

Your data is never used for marketing purposes, nor transferred, rented or sold to third parties.

Where does your data go and how long is it kept?

Messages sent through the form are not stored in a database: they are sent directly by email to the association's contact@yggame.fr mailbox.

Retention periods

  • Contact messages (contact@yggame.fr mailbox): as long as needed to handle your request, then deleted no later than 3 months after the last exchange;
  • IP address used to limit form messages: less than an hour;
  • Server technical logs (including the administration login log): 6 months at most;
  • Contributor accounts: as long as the volunteer contributes to the site; deleted when they leave;
  • Administration activity log: 6 rolling months;
  • "Trusted device" cookie (contributors): 30 days.
  • Recipients: only the members of the association's board authorised to handle requests or to administer the site.
  • Processor: a hosting provider based in France, which hosts the website, its logs and the association's mail server.
  • Cache: to speed up the site, public pages are cached on the server. They are identical for all visitors and contain no personal data.
  • Transfers outside the EU: none. The website, its logs and emails are hosted in France, and the site loads no third-party resources (self-hosted fonts).

Cookies and trackers

The public website sets no cookies: no tracking cookies, no advertising or analytics trackers, and no technical cookies. The contact form is protected against forged submissions without any cookie. This is why no cookie banner is displayed.

Only the site administration, reserved for contributors, uses strictly necessary cookies (login session, two-factor authentication "trusted device"), exempt from consent under the guidelines of the CNIL (the French data protection authority).

Event photos and videos

Photos and videos of our events in which people can be recognised may be published on this website and on our social networks. If you appear in one of them and want it removed, write to contact@yggame.fr stating the page concerned: removal is carried out within 15 days at most.

Your rights

Under the GDPR and the French Data Protection Act, you have the following rights over your data:

  • right of access and to obtain a copy;
  • right to rectification;
  • right to erasure;
  • right to restriction of processing;
  • right to object to processing based on legitimate interest;
  • right to data portability for the data you provided to us (contact form);
  • right to set instructions regarding the fate of your data after your death.

To exercise them, write to contact@yggame.fr. We reply within one month.

If, after contacting us, you consider that your rights are not respected, you may lodge a complaint with the CNIL: www.cnil.fr - CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.

Security

The website is served over HTTPS only. Form messages are protected against automated submissions (without any third-party service such as reCAPTCHA) and do not go through any analytics service. Access to the administration is protected by mandatory two-factor authentication.