Wiki-Go collects as little data as possible: an email, a username and what it takes to run the game. No real name, no targeted ads, no data resale.
Who is responsible?
The data controller is Hermann Philippe, sole trader, 12 rue des Roches Douvres, 22000 Saint-Brieuc, France. Contact: support@wiki-go.com or wiki-go.com.
What we collect and why
- Account: email, password (encrypted, never readable), username, avatar, game language. To sign you in and identify you in the game (performance of the contract).
- Year of birth: to check the minimum age and reserve real-money purchases for adults (legal obligation). It is never shown.
- Game data: cards, Wikibucks, auctions, trades, quests, leaderboards, clans, messages. To run the game (performance of the contract).
- Technical logs: IP address and device information, kept for 30 days, for security and to fight cheating and multiple accounts (legitimate interest).
- Location (GO mode): only if you turn it on, with your explicit consent; off by default. Your location is used to find the places around you, to place your booster and to check that you are near a place or a booster when you collect it, then it is forgotten: we never store it. Your booster is placed at random 150 m to 1 km from you: its position is kept while it is on the map (deleted at most one hour after it disappears), then for one day after you collect it (speed check); after that only the day and its rarity remain, for 15 days. The places you collect stay in your journal (they also decide when each place recharges).
- Payments: handled by Stripe, our payment provider; we never see your card number.
- Performance measurements: how long the game takes to load and respond (for example “market list: 120 ms”), added up across all players, with no identifier, username, IP address or content, and no cookie. To make the game faster (legitimate interest).
Signing in with Google, Apple or Discord
You can create your account and sign in with Google, Apple or Discord. Here is exactly what Wiki-Go does with the information these services pass on to it (for Google, the “Google user data”):
- Access: we receive only your email address, the technical identifier of your account with that service and, depending on the service, your name and profile picture. We request no other access: no contacts, calendar, files or messages.
- Use: creating your Wiki-Go account and recognising you each time you sign in. Nothing else: no advertising, no profiling.
- Sharing: this information is never sold or passed on to third parties, except to our technical processors (hosting of the database and of sign-in), who process it on our behalf, and where the law requires it.
- Protection: encrypted connections (HTTPS), database encrypted at rest, access restricted to the people who run the game, access rules enforced by the server on every read and write.
- Retention: as long as your account exists; erased with it when you delete your account from the settings, or on request via wiki-go.com.
Wiki-Go’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: this data is never used for targeted advertising, never sold or transferred to data brokers, and never used to assess creditworthiness or to train artificial-intelligence models.
What other players see
Your username, avatar, level, game language, card showcase, messages in public rooms and your clan. Never your email or your year of birth.
Where is your data?
Hosted in the European Union. Technical processors: Supabase (database and sign-in, servers in the European Union) and Cloudflare (site delivery, relay of card images, captcha) and Stripe (payments). Each is bound by a data processing agreement.
How long?
- Account and game data: as long as your account exists.
- Technical logs: 30 days.
- Performance measurements (anonymous): 90 days.
- After account deletion: personal data is erased; cards and transactions stay under an anonymous name.
- Invoices: the legal accounting retention period.
Your rights
You can access your data, correct it, export it (portability), object to some processing and delete your account. Export and deletion are done directly from the settings. For anything else: wiki-go.com. You can also contact the CNIL, the French data protection authority (cnil.fr).
Storage on your device
Wiki-Go keeps your sign-in session in your browser’s local storage, plus an offline copy of the app and of images you’ve already seen. No advertising cookies, no third-party audience measurement tool.
