Privacy policy

Last updated: 22 October 2026

procstd offers logic games, puzzles, word, memory and arithmetic games, to play alone or with friends (challenges, leaderboards, tournaments). This page explains what data is processed, why, for how long, and how to exercise your rights. The French version (Politique de confidentialité) prevails in case of discrepancy.

Data controller

OBE (sole trader, France) — contact@procstd.com

Data processed

• Game account: anonymous identifier created on your first visit (no sign-up), chosen nickname, avatar and frame, language.
• Games: game, score, time, mistakes, date and the log of in-game actions (used to check that a score is not faked).
• Social activity: challenges created and taken, reactions, friends, club, friend quests, leagues, tournaments, experience, badges and streaks.
• Google account (optional): if you link it, your e-mail address and Google identifier (to sign you back in). We never receive your password.
• E-mails (optional): your e-mail preferences (digest, reminders).
• Push notifications (optional): the subscription address and keys provided by your browser or phone if you turn them on, and your preferences per type.
• Subscription (optional): provider (Stripe or Google Play), status and end date.
• Moderation: reports you make, players you block.
• Technical data: IP address and server logs, for security and abuse prevention (rate limiting).

Purposes and legal bases

• Running the game, challenges, leaderboards, leagues, clubs and tournaments (performance of the service).
• Checking scores, detecting cheating and abuse, moderating content and keeping the service secure (legitimate interest).
• Managing the unlimited subscription (performance of the contract; accounting obligations).
• Sending the push notifications and e-mails you turned on (consent, which you can withdraw at any time in the app or with the unsubscribe link).

No ads, no advertising profiling, no data selling.

Retention periods

• Account and game data: as long as the account exists; deleted immediately when you delete your account, and automatically after 2 years without signing in (an e-mail warns you 30 days before if an address is linked; an active subscription prevents it).
• Guest account (never linked) with no game and no challenge: deleted automatically after 30 days of inactivity.
• Detailed action log of a game: erased after 90 days (except for a game that started a shared challenge, used to replay it); the score stays.
• Read notifications: deleted after 60 days.
• E-mail queue (address and message): deleted 30 days after sending.
• Subscription: as long as the account exists; invoices are kept by Stripe or Google under their accounting obligations.
• Database backups: one per night, each kept 14 days then erased.
• Server logs (including IP addresses): at most 5 × 10 MB per service, older lines being erased automatically.

Recipients and processors

• OVH (France) — hosting of the servers and database.
• Google (United States) — only if you choose "Sign in with Google".
• Your browser's or phone's push service (Google, Apple or Mozilla depending on the device, United States) — only if you turn notifications on: it receives the encrypted notification to deliver it.
• E-mail delivery: no provider at the moment (no e-mails are sent).
• Stripe (web) or Google Play (Android app) — only if you subscribe: they process the payment; procstd never receives your card details, only the subscription status and end date.

Other players see your nickname, avatar, scores, rankings, club and reactions. Reports and blocks are never revealed to the person concerned.

Transfers outside the European Union

Game data is hosted in France. Some optional services are provided by US companies (Google, Apple, Mozilla; Stripe may also process data in the United States), so the data they receive may be transferred outside the EU. These transfers rely on the European Commission's adequacy decision for companies certified under the EU–US Data Privacy Framework, or otherwise on the Commission's standard contractual clauses. Nothing is transferred if you do not use these services.

Children

procstd can be used with no account and no identity data: a nickname is enough, and we recommend not using your real name. In France, children under 15 need the consent of a parent to link a Google account, turn on e-mails or notifications, or subscribe. A parent can ask at any time for their child's account to be deleted at contact@procstd.com.

Storage on your device

procstd uses no tracking or advertising cookies, so there is no cookie banner. The app keeps your session token (to find your profile) and display preferences in your browser's storage.

Your rights

You have the rights of access, rectification, erasure, objection, restriction and portability:

• Access and portability: export all your data from the app.
• Rectification: change your nickname and avatar in the app.
• Erasure: delete your account in the app or from this page (in French).
• Any other request: contact@procstd.com.

You can also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or the authority of your country.