Privacy policy

Last updated: November 4, 2026

In short

Duplics only collects what it needs to run the game. Your data is never sold, Duplics shows no ads, and your email address is never shown to other players. Audience measurement is only switched on if you accept it.

Data controller

Your data is processed by LudicsCorner, publisher of the Duplics app. For any question about your data, write to contact@duplics.com.

Data we collect
  • Your account: username, email address, password (stored as a hash, never in plain text), language, or the identifier provided by Google or Apple if you sign in with them.
  • Your profile, if you fill it in: bio, gender, year of birth, avatar.
  • Your games: games, moves, scores, rankings, statistics, tournaments, your list of friends and blocked players, messages exchanged with other players.
  • Your purchases: transaction identifiers sent by the App Store or Google Play. Payment is handled entirely by Apple or Google: Duplics never receives your bank details.
  • Technical data: IP address, session and notification tokens, device and app type and version, error reports.
  • Audience measurement, if you accept it: pages viewed and main game events (a game starting or ending, for instance).
Why, and on what basis
  • Running the game (account, games, rankings, messages, purchases): performance of the service you use.
  • Letting you know by email or notification (your turn to play, an invitation…): performance of the service. Each kind of notification can be turned off in your settings.
  • Protecting the service (fighting abuse and cheating, account security) and fixing errors: legitimate interest.
  • Measuring the audience to improve the game: your consent, which you can withdraw at any time.
  • Keeping purchase records: legal and accounting obligations.
What other players see

Your username, avatar, bio, scores and rankings are visible to other players. Your messages are only visible to their recipient. Your email address, gender and year of birth are never shown.

Service providers

Only the members of the Duplics team have access to the data. Some providers process it on our behalf, solely for the service they provide to us:

  • Scaleway (France): hosting of the servers and the database.
  • Brevo (France): sending emails.
  • Sentry: collection of error reports, hosted in the European Union. When an error occurs, the report may include a recording of the last actions on screen, passwords excluded.
  • Google Firebase Cloud Messaging and Apple Push Notification service: delivery of notifications.
  • Google and Apple: signing in with a Google or Apple account, in-app purchases.
  • Google Analytics: audience measurement, only if you have accepted it.

Some of these providers are based in the United States. Any transfer of data outside the European Union is covered by the Data Privacy Framework or by the standard contractual clauses of the European Commission.

Cookies

Duplics uses cookies that it needs to work (session, language, theme, game options, remembering your cookie choice). They do not require your consent.

Audience measurement cookies (Google Analytics) are only set if you accept them. Your choice is kept for six months, after which you are asked again. You can change it at any time with the "Cookies" link at the bottom of the "Others" view of the app.

How long we keep data

Your data is kept for as long as your account exists. You can delete your account at any time from the "Profile" view: all your personal data is then erased (account, profile, messages, friends, sessions and devices, email address at our mailing provider). Only the history of your games is kept, in an anonymous form, so as not to distort the games and rankings of other players, along with purchase records.

Error reports and audience measurement data are kept for a limited time, set by the providers concerned. Purchase records are kept for the period required by law.

Your rights

Under the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have the right to access, rectify, erase, restrict and port your data and to object to its processing, as well as the right to withdraw your consent and to give instructions on what happens to your data after your death.

To exercise these rights, write to contact@duplics.com. If, after contacting us, you feel your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).

Security

Exchanges with Duplics are encrypted (HTTPS), passwords are never stored in plain text, and access to the data is restricted to the Duplics team. We take every reasonable precaution to preserve the integrity and confidentiality of your data.

Changes

This policy may change as the app evolves. The date of the last update is shown at the top of this page.