Privacy Policy

1. Data controller

The Imposter Game application (the "App") is published by Alpaga, a simplified joint-stock company with share capital of EUR 50, whose registered office is located at 7 allées de Chartres, 33000 Bordeaux, France, registered with the Bordeaux Trade and Companies Register under number 881 850 556, acting as the controller of your personal data.

For any question about your data or to exercise your rights, you can write to us at imposter@alpaga.io.

2. Our principle

Imposter Game is a single-player game designed to work offline. The App works without creating an account and without you providing any identifying data (name, email address, phone number, etc.).

We operate no server hosting your data: your game data stays on your device. We process only a limited set of anonymous technical data, described below, for analytics and purchase management.

3. Data we do not collect

• We do not ask you to create an account.
• We do not collect your name, email address or phone number.
• We do not access your contacts, precise GPS location, microphone, camera or photos.
• We do not sell any data and we do not run targeted advertising.

4. Data stored on your device

Your scores, progress, unlocked purchases and preferences (such as theme, difficulty or game mode) are stored locally on your device. This data never leaves your phone and is not transmitted to us. It is deleted if you uninstall the App or clear its data from your device settings.

5. Motion sensor

Some game modes use your device's accelerometer to react to its tilt. These readings are used in real time, solely to run the game on your device; they are neither stored nor transmitted.

6. Analytics (PostHog)

To improve the App and understand how it is used, we use the analytics tool PostHog. As part of this, anonymous usage data may be collected, including:

• usage events (screens viewed, games started, levels completed, features used);
• technical information: device model, operating system and version, App version, language, approximate region derived from your IP address;
• a random identifier unique to the installation, which does not identify you by name.

Analytics is fully anonymous: it contains neither your name nor your email address, involves no advertising targeting and uses no tracker requiring your consent.

PostHog acts as a data processor. You can object to this analytics by writing to us at imposter@alpaga.io. Learn more: https://posthog.com/privacy.

7. In-app purchases

The App is free and may offer in-app purchases. Payments are processed exclusively by the Apple App Store or Google Play, depending on your device. We do not receive or store any payment card details.

The technical management of purchase entitlements (unlocking and restoring content) relies on the provider RevenueCat, acting as a data processor. For this purpose, an anonymous purchase identifier unique to the installation and the technical confirmation of your purchases are processed, with no identifying data.

8. Leaderboards (Game Center and Google Play Games)

The App offers optional leaderboards, in particular for the daily challenge. This feature relies on Apple Game Center (on iOS) and Google Play Games Services (on Android).

If you use a leaderboard, your game score and an associated gaming identifier are processed by Apple or Google, which operate these services under their own privacy policies. This gaming identity comes from the Apple or Google account already present on your device; the App does not create an account of its own and does not store these scores or identifiers on any server of ours.

Leaderboards are optional: if you are not signed in to Game Center or Google Play Games, or choose not to use them, the App works normally and your scores stay on your device. Learn more: Apple (https://www.apple.com/legal/privacy/) and Google (https://policies.google.com/privacy).

9. Sharing and external links

• If you use the share feature (e.g. to share a score), you choose the destination app; the shared content then passes through the service you select.
• The App may open external links in your browser. Such websites are subject to their own privacy policies.

10. Rating prompt

The App may invite you to leave a review. This feature relies on the rating mechanism provided by Apple or Google; any review is handled by the relevant store under its own policy, and we receive no identifying data in this respect.

11. Purposes and legal bases

We process data for the following purposes:

• Running the game and remembering your scores, progress and preferences on your device: performance of the service you request and our legitimate interest in providing a working game (Articles 6.1.b and 6.1.f GDPR). This data stays local.
• Measuring audience and improving the App: our legitimate interest in understanding how the game is used and improving it (Article 6.1.f GDPR). This measurement is fully anonymous and does not require your consent.
• Unlocking and restoring purchases: performance of the contract (Article 6.1.b GDPR).
• Providing leaderboards when you use them: our legitimate interest in offering an optional competitive feature (Article 6.1.f GDPR); the underlying gaming identity and scores are handled by Apple or Google.
• Ensuring security, preventing abuse and meeting our legal obligations: legitimate interest and legal obligation (Articles 6.1.f and 6.1.c GDPR).

12. Retention periods

Data stored locally (scores, progress, unlocked purchases, preferences): kept on your device for as long as the App is installed, until you erase it or uninstall the App.

Analytics data: kept in anonymous or pseudonymised form for no longer than 13 months from collection.

Purchase-related data: kept for as long as needed to manage your purchase entitlements and to meet our legal and accounting obligations.

13. Recipients and processors

We do not sell your data and do not use it for advertising.

Your data is shared only with the technical providers needed to run the App, acting as processors on our behalf and on our instructions:

• PostHog: anonymous analytics;
• RevenueCat: technical management of purchase entitlements;
• Apple and Google: processing in-app purchases, as controllers for the payment operations;
• Apple (Game Center) and Google (Google Play Games Services): providing the optional leaderboards, as controllers for that feature.

We may also disclose data where required by law or to assert our rights.

14. Transfers outside the European Union

Some providers (in particular PostHog and RevenueCat) may process data outside the European Union, including in the United States. In that case, such transfers are framed by appropriate safeguards within the meaning of the GDPR, such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework. You can ask us for a copy of these safeguards at imposter@alpaga.io.

15. Security

We implement reasonable technical and organisational measures to protect the data processed. As no transmission over the Internet is fully secure, we cannot, however, guarantee absolute security.

16. Children

The App is not directed to children under the age of 13 (or under the age of digital consent applicable in your country). We do not knowingly collect identifying data about children. If you hold parental authority and believe that a minor has provided data without authorisation, contact us at imposter@alpaga.io.

17. Cookies and trackers

The App uses no advertising cookies and no tracking for targeting purposes. Analytics is strictly anonymous and limited to the statistics needed to improve the game; it cannot identify you and does not require consent under the rules applicable to trackers.

18. Your rights

Under the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have the following rights: access, rectification, erasure, restriction of processing, objection and data portability.

Given the anonymous nature of the analytics data, we may be unable to identify you without additional information; in that case, these rights may not apply.

At any time you can erase the data stored on your device by clearing the App's data or uninstalling it.

You have the right to give directions concerning the fate of your data after your death.

To exercise these rights or for any question, write to us at imposter@alpaga.io. We respond within one month, which may be extended in accordance with the GDPR.

You have the right to lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr, or with the supervisory authority of your country of residence.

19. Changes

We may update this policy. The version that applies is the one available at the time you use the App. In the event of a material change, the "last updated" date above is revised.

20. Contact

For any question regarding this policy or your data, write to us at imposter@alpaga.io.