Privacy policy

This English text is a courtesy translation. The French version governs.

Légarius makes mobile games. This policy describes everything our games and our website collect, for what purposes, and what you can refuse. It is written in the present tense: everything below describes what the version of the game in your hands actually does.

At a glance

What the game sends by default	Nothing about you. The features listed opposite stay off until you turn them on.
What you can turn on	The profile (§4), error reports (§3.1), usage statistics (§3.2) and personalised suggestions and advertising (§17.2). Each is a separate choice, never tied to the others.
Where what you do lives	On your device. The profile keeps a copy so it can give it back to you elsewhere; it does not become the original.
The profile	An identifier your device generates. No name, no email, no password. The same one across all our games (§4.1).
Purchases	Handled by Google Play. We never see your payment details. We keep the order record (§2).
Advertising	No advertising network, no third-party SDK, no advertising identifier. What you are shown is the same for everyone unless you turn personalisation on (§17.2). An advertiser never receives anything but counts.
How to delete everything	From the in-game settings, yourself. Uninstalling erases what is on the device. For what we hold: one email, and we delete it.
Who to contact	Privacy Officer, support@legarius.games

1. How to read this policy

The table below governs. It lists everything we collect, for what purposes, what you can refuse, and how long we keep it. The sections that follow explain how each thing works; they do not repeat the purposes or the durations. If a section and this table disagree, the table wins.

It follows the same categories as Google Play's "Data safety" form, and says the same thing.

Category	Collected when	Purposes	Refusable	Retention	Third parties
Personal information (name, email)	Never, unless you write to us (§6)	Answering you	—	12 months	No
Profile identifier (randomly generated)	When you create a profile (§4)	Running the profile and what depends on it; in-game rewards and offers (§17.1); personalised suggestions and advertising, if you accept them (§17.2); service security; answering support	Yes, do not create one	24 months after last use	No
What the profile keeps for you (§4)	When you use a profile	Giving back what you put there, on the device of your choice	Yes, do not create one	24 months after last use	No
Purchase history	When you buy something (§2)	Tax compliance; fraud prevention; showing you and restoring your purchases	No, legal obligation	6 years (tax law)	No
Analysis of purchase history	Only if you accept usage statistics (§2)	Improving our games	Yes	12 months	No
In-game activity	Only if you accept usage statistics (§3.2)	Improving our games	Yes	12 months	No
Crash and performance data	Only if you accept error reports (§3.1)	Fixing bugs	Yes	12 months	No
Service security checks	When you use a profile (§3.5)	Protecting the service and your profile from abuse and fraud	No, inseparable	12 months	No
Open session on our website	Only if you open your profile (§5.2)	Keeping your profile open while you use it	Yes, do not open one	Until you sign out, at most a day	No
Precise device location (GPS)	Never	—	—	—	No
Approximate region inferred from IP address	Never	—	—	—	No
Contacts, photos, files, microphone, address book	Never	—	—	—	No
Personalised suggestions and advertising (§17.2)	Only if you accept personalisation	Choosing what you are shown, and how often. Targeting happens on our servers; the advertiser receives only counts	Yes	24 months after last use	No
Advertising networks, third-party SDKs, advertising identifier	Never	—	—	—	No

The "Never" entries above are commitments. If we ever revisited them, that would be a material change: we would publish a notice and ask for your consent again (§22).

The "Refusable" column marks two regimes. Most rows do not exist unless you turn them on. Two rows have no checkbox: your purchase record, which tax law requires us to keep, and the security checks, without which we could not offer a profile to anyone. Both are explained in full in sections 2 and 3.5.

2. What our games do, and your purchases

By default, our games send no information about you, to us or to anyone else. What you do in a game is stored on your own device, and stays there.

Only three things can leave your device: the profile (§4), error reports (§3.1) and usage statistics (§3.2). All three stay off until you turn them on, each is asked for separately, and none is a condition of another.

Everything that does not need our servers keeps working without them. Some features cannot exist without a profile, because they consist precisely of keeping something somewhere other than your device, or of finding it again from another device. Each game tells you which ones as you meet them.

Purchases

If you choose to buy an optional item, the purchase is handled entirely by Google Play's billing service. We never see your card number or any payment details. Google's privacy policy governs the transaction itself.

What we keep. The order record: which item, when, at what price, the order token issued by Google, and the profile the item was attached to.

Why this record is not optional. Tax law requires us to keep a record of our sales and to produce it on request. That record also lets us show you your own purchases and restore a paid item on a new device: without it, a lost purchase would be lost. It finally lets us catch fraud, for example a reused order token or a refund followed by keeping the item.

Along with the security checks in section 3.5, this is the only information we keep without asking your permission. It exists only if you buy something.

What does stay optional. Using those records to understand what people buy and improve our games is a separate purpose, and that one depends entirely on your consent to usage statistics (§3.2). If you have not given it, or if you withdraw it, your purchases stay in the record for the reasons above and drop out of all analysis.

A deletion request does not erase a sales record that the law requires us to keep. We will tell you exactly what remains and why.

3. Error reports and usage statistics

Two separate features, off by default, asked for separately from each other and separately from the profile. Turning one on never turns on the other.

3.1 Error reports

What is sent. When a game crashes or misbehaves: the type of error and where in the code it happened, the device model, the operating system version, the game version and the language.

3.2 Usage statistics

This is what the game calls "help improve the game".

What is sent. What you do in the game: how far along you are, whether an attempt succeeded or was abandoned, how long it took, how many tries, which screens you open and which settings you change.

What we do not do with it. It also never feeds personalised suggestions (§17.2), which use only what your profile keeps and never what you agreed to send under this section. No advertising, no advertising profiling, no disclosure to a third party, and no decisions about you: this data is used to judge our games, never people (§16).

3.3 What is never sent under either heading

Your name, your email, your Google account, your location, your address book, your files, or the contents of your device.

3.4 What these transmissions are attached to

If you have a profile, these transmissions carry the identifier described in section 4, so that several transmissions from the same device can be grouped. That section's protections therefore apply to them too.

If you do not, no durable identifier is created for the purpose. Your transmissions are grouped using a computed value that changes every day and that we cannot link back to the previous day's. Nothing is stored on your device for this, so there is no identifier to show you, to keep, or to delete. You can turn on usage statistics without ever becoming identifiable to us.

3.5 Security checks

When you use a profile, we verify that what we receive is coherent, we limit the number of attempts on the recovery code, and we count transmissions to stop one device from saturating the service.

These checks are inseparable from the service itself. They are not statistics and are not asked for separately, because without them we could not offer a profile to anyone. They serve only to protect the service and your profile, they are never fed into usage statistics, and they are kept in a register separate from those. If we ever wanted to use them to understand how our games are used, that would be a new purpose, and it would go through your consent like everything else in this section.

4. Your profile

What the profile is. An identifier randomly generated on your device at the moment you create the profile, and not before: until you create one, it does not exist, neither on your device nor with us. It has no link to your name, your email, your phone number, your Google account, or any advertising identifier. It lets us give back what you entrusted to us, without knowing who you are.

We ask you for no name, no email and no password. The profile is not a sign-up: it is an identifier your device makes, and that you can carry elsewhere.

4.1 One profile across all our games

The same profile applies across every Légarius game. If you create one in one of our games and use it in another, it is the same identifier, and we can therefore see that the same person plays both. We say so plainly because it is the only correlation the profile makes possible, and you should be able to weigh it before creating one.

You are not required to use it everywhere. Each game asks you separately whether you want the profile there, and declining in one has no effect on the others.

4.2 What the profile keeps

What you put there, and nothing else: how far you have got, what you own in our games, what you have achieved, and your settings. The exact list depends on the game, and each game shows you what it keeps for you. We add nothing to it that does not come from the way you play.

Two of those deserve naming on their own, because the sentence above would not make them obvious.

Some achievements carry a date. A daily challenge belongs to the day it was set, so keeping the achievement means keeping that day. The profile therefore shows the calendar days on which you completed one. It holds no other dates about how you play: not the days you opened a game without finishing a challenge, and not the length of any single session.

How long you have played. Our games keep a running total of time spent playing, and the profile keeps that total. It exists so that what you earn is paced by playing rather than by waiting, which is why we measure it at all. It is one number per game — time spent with a game open and running, added up, and nothing about what else your device was doing.

That content is given back to you on the device of your choice. It is disclosed to no third party.

4.3 How you prove the profile is yours

We do not ask who you are, so there is no name and no password to check. What proves a profile is yours is possession: of the device it is on, or of a code you kept.

The recovery code. To take your profile back on another device, the game issues a code that you type on the new device. This code is an authentication secret: whoever holds it can claim the profile it designates. Keep it like a password. Using it moves the profile to the new device and signs the old one out.

We do not keep the code itself, only a cryptographic fingerprint computed by a slow function designed to resist systematic guessing. We are therefore unable to remind you of it if you lose it, and the number of entry attempts is limited. Issuing a new code cancels the previous one.

The game keeps the code on your device until you confirm you have saved it somewhere, and erases it once you do. Before that, a closed app or a reload would have lost a code we cannot reissue.

Opening your profile in a browser. The game can show you a short code that opens your profile on our website. It is not the recovery code, it lasts a few minutes, and using it moves nothing and signs no device out. What it leaves in your browser is described in section 5.2.

If you lose both your device and your code, nobody can recover your profile, not even us: there is no other way to prove it is yours. That is the trade-off for not asking you who you are.

4.4 Refusing it, and deleting it

No profile is created by default. Consent is asked for separately from everything else, it can be refused, and it can be withdrawn at any time from the in-game settings.

What refusing costs you. Everything that works on your device keeps working without a profile. What requires a profile are the features that consist precisely of keeping something somewhere other than your device, or of finding it again from another device: they cannot exist without an identifier.

What deleting does. We delete the identifier and everything attached to it, and the game keeps working on your device. You can do it yourself from the settings, without writing to us and without waiting for our reply. Your purchase record survives that deletion, for the reasons explained in section 2, and it is then the only thing left.

The deletions register. When you request a deletion, we write your identifier alone into a register, so that the deletion can be reapplied if a backup copy of our servers ever had to be restored in the meantime. This register is kept for as long as the oldest backup copy we hold, and then the entry disappears too. It is the only duration in this policy defined relative to another rather than as a number of months, and that is deliberate: if it were shorter, a restore could resurrect a profile you deleted.

4.5 Your rights over the profile

We treat this identifier as personal information, and all the rights described in section 15 apply to it. It is shown in the in-game settings and you can copy it: it is what you send us to exercise those rights, and it is also what you give us if you write to support (§6). It grants access to nothing by itself: without the recovery code, knowing it lets nobody reach your profile.

Hosting. See section 11.

5. Our websites

We run two web addresses, and they do not work the same way. legarius.games presents the studio and its games; it shows you pages, and nothing more. profil.legarius.games is the service where you open your profile, see what it keeps and delete it; it has to know which profile it is talking to, which a site that only shows pages never needs to do. We describe them separately below: what holds for one does not hold for the other.

5.1 legarius.games

We run this site's server ourselves, and we have disabled request logging: we neither create nor keep any record of the pages you view, your IP address, or your browser, and we use no statistics tool.

Let us be precise about what that means. Sending you a page still requires your device and our server to exchange connection information. Your IP address is necessarily used to route the page to you, and the encrypted connection exists in our server's memory for the duration of your visit. Our operating system may briefly keep ordinary system or error records, and the network providers between you and us handle your traffic according to their own practices, which we do not control. What we do not do is write your visits to a file and keep it.

When you open our address without a language prefix, our server reads the language preference your browser sends with the request, in order to direct you to the appropriate language version. That preference serves only that redirection. It is not kept and is not used to build any portrait of you.

This site sets no cookie, stores nothing in your browser, runs no JavaScript, and loads no resource from any other site.

If we ever enable request logging, we will update this policy and publish a notice of the change before doing so.

5.2 profil.legarius.games

This is where you open your profile, see what it keeps, and delete it. What follows describes what happens in your browser; what the profile itself keeps is described in section 4, and how long it is kept, in section 10.

It requires JavaScript. A page that identifies you, shows you what is yours and deletes it has to check each request at the moment you make it. Fixed pages cannot do that, and we will not pretend otherwise.

It uses cookies only to keep you signed in. While your profile is open, your browser holds what proves to the server that it is you, together with what the page needs in order to draw the right screen. They serve that and nothing else: no statistics, no measurement, no advertising, nothing shared with anyone. They do not follow you to legarius.games, and they say nothing about what you do anywhere else. Signing out removes them, and so does clearing this site's data in your browser. They are the only thing this address keeps in your browser.

It loads no resource from any other site: no font, no script, no image, no statistics tool. Everything the page shows comes from our own servers.

The language is set by the address you open and, failing that, by the language preference your browser sends. As on legarius.games, that preference serves only that redirection, and no cookie keeps it.

Let us say this plainly rather than leave it to be inferred: unlike legarius.games, this address handles personal information. That is what it is for. The profile identifier and what the profile keeps are described in section 4, your purchase record in section 2, and the security checks in section 3.5. The table in section 1 brings them together, with their retention periods.

6. If you write to us

What you send us by email (your address and the contents of your message) is kept by Zoho Mail for 12 months, then deleted. We use it only to reply to you.

If your request concerns your progress, a purchase, or the exercise of a right under section 15, we will ask you for your profile identifier. It is the only way we have of finding what relates to you. It then appears in the email thread, with the same 12-month retention, and we use it only to handle your request and reply to you. We do not use it to send you anything else: we have no newsletter, no notifications and no promotional communications.

7. Consent

Each feature below is a separate, independent choice: the profile (§4), error reports (§3.1), usage statistics (§3.2) and personalised suggestions and advertising (§17.2). Accepting one never turns on the others, and none is a condition of another.

In particular: you can use a profile without accepting usage statistics, and you can accept usage statistics without creating a profile (§3.4). We reserve no feature, no backup and no purchase for people who accept statistics.

For each of them, we commit to the following, and these commitments are not negotiable on our side:

• the feature is off by default;
• consent is asked separately for each purpose;
• the request is made in plain language, with no pre-ticked box and no button designed to catch you accepting by accident: accepting and declining carry the same visual weight;
• declining takes away no feature that does not need our servers. The ones that do need them require a profile, because they cannot exist without an identifier (§4.4);
• you can withdraw your consent at any time in the in-game settings, and we then delete what we hold. Withdrawing is as easy as accepting: same screen, same number of taps. Personalised suggestions (§17.2) can also be withdrawn from your profile on our website.

If you decline, we ask you at most once more, later in the game, and never after a second refusal. You keep the ability to turn it on yourself in the settings at any time. We do not make the question insistent and we do not raise it at every launch.

Two things fall outside this regime, and both are named in the table in section 1: your purchase record (§2) and the security checks (§3.5). Analysing your purchases does depend on your consent, like everything else in section 3.

8. We sell nothing

We do not sell, rent, trade or disclose personal information. We have no advertisers, no data brokers and no advertising analytics providers. This remains true when we sell advertising space (§17.2): we sell space, never information. Targeting happens on our servers, which the advertiser cannot reach, and what it receives is limited to numbers — how many times its advertisement was shown, how many times it was tapped. Nothing that identifies you is disclosed to it, directly or by cross-referencing. This holds for everything this policy describes, including the usage statistics in section 3: they are for us, on our own servers, and are disclosed to nobody.

9. Third parties

• Google (Play): an independent party acting under its own policy. Google collects installation, device, crash and purchase information, and handles every purchase. We see aggregate statistics in the Play Console that we did not collect ourselves.
• Zoho Mail: handles support email on our behalf.

We have no advertiser, no data broker, no analytics provider and no content delivery network. Neither of our sites (section 5) loads anything from another company's servers.

The features in sections 3 and 4 involve no third party. Error reports, usage statistics and online backups are received and kept on a server we run ourselves in Québec. We use no external analytics service, crash reporting service, cloud database or content delivery network. If that were to change, the provider would be named here before going live.

10. Retention and deletion

The durations are in the table in section 1, once, so that no two sections can contradict each other. This section says how deletion happens.

On your device. Uninstalling the app deletes everything it stored there. You can also reset everything from the in-game settings, without uninstalling.

With us. You can delete your profile yourself from the in-game settings, without writing to us and without waiting for our reply. The deletion is immediate, not queued. You can also write to support@legarius.games, the single address for any request.

What survives a deletion, and why. Your purchase record, which tax law requires us to keep (§2), and the entry in the deletions register, whose only role is to make your deletion stick (§4.4). Nothing else.

The websites. We keep no record of visits, so there is nothing to retain or delete. The one exception is an open session on profil.legarius.games, which lasts while you are using your profile and ends when you sign out.

11. Disclosure outside Québec

This website runs on a server located in Québec, which we operate ourselves. Information related to your visit does not leave Québec as a result of our hosting.

If you write to us, your message is kept by Zoho Mail, whose servers are located in Canada. Before using that service, we assessed the protection your information would receive there, and we hold a written agreement with the provider. You may ask us for a summary of that assessment.

For the features in sections 3 and 4: the threshold set by law is disclosure outside Québec, not outside Canada: a server in Toronto would be caught. Your backups, your error reports and your usage statistics are received and kept on a server located in Québec, which we operate ourselves. They do not leave Québec, and no third party processes them on our behalf. If that were to change, we would name the country concerned here, and we would have carried out the required assessment and concluded the required written agreement before going live.

12. Security

If you turn on none of the features in sections 3 and 4, no studio server holds any information about you: what you do in our games stays on your device.

If you turn one on, what we receive is kept on a server we run ourselves in Québec, and protected as follows:

• Encryption in transit. Every transmission between the game and our servers goes over an encrypted connection; no unencrypted version is accepted.
• Encryption at rest. The server's disks are encrypted, and off-site backups are encrypted with a key the host of those backups does not hold.
• Restricted access. The server is administered only by the Privacy Officer; access requires a cryptographic key and password logins are disabled.
• Separation. The same machine hosts our source code repository. The two services are separate, each with its own system profile, and neither can read the other's data.
• The recovery code is never kept in the clear (§4), and the number of entry attempts is limited.
• No access log. We do not keep the IP address of devices that talk to the game interface, not in a log, not in a counter, not anywhere. Our application logs contain the error type, the endpoint reached and the time. Never an IP address, never a profile identifier, never the contents of a transmission.

Both of our sites are served over HTTPS only, plain HTTP is redirected, and security headers stop them from loading external resources or from being embedded by other sites. The server is administered only by the Privacy Officer; access requires a cryptographic key and password logins are disabled. Server access is protected against automated login attempts by a standard blocking tool, which temporarily records the IP addresses of hosts making failed administrative logins. That concerns access to the machine, never your use of the website. Every profile that can reach our infrastructure, our domain name, our source code or our support inbox is protected by two-factor authentication. Security updates are applied promptly.

On your device, your save is protected by the operating system's application sandbox and by device encryption where the device offers it.

We do not claim any system is impossible to compromise.

13. Privacy incidents

If a privacy incident affecting your personal information occurs and presents a risk of serious injury, we will notify you promptly, we will notify the Commission d'accès à l'information du Québec, and we will tell you what measures we are taking. We keep a register of all privacy incidents.

14. Minors

Our games are not designed for children; they are aimed at a general audience aged 13 and up. If a minor under 14 were to use a feature described in sections 3 or 4, consent would be given by the person having parental authority or by the guardian.

15. Your rights

You may ask us for:

• access to the personal information we hold about you;
• its correction if it is inaccurate, incomplete or ambiguous;
• the withdrawal of your consent, where a processing activity rests on it;
• the cessation of dissemination of information about you, or its de-indexing, in the cases provided by law;
• the communication of your information in a structured, commonly used technological format (portability).

Send any request in writing to the Privacy Officer, at support@legarius.games. We answer within 30 days.

So that we can find what relates to you, include your profile identifier with your request: it is shown in the in-game settings, under "Online", and copies with one tap. Without it, we have no way of knowing which of our data is yours, and an access request will return only the emails you sent us.

If you have never created a profile, there is no identifier, because none was ever created (§4), and we hold nothing tied to your use of the game. Your save is already in your hands, on your device. If you turned on usage statistics without a profile, what we received cannot be linked to you by anyone, including us (§3.4): there is therefore nothing to extract or delete, and that is the price of not being identifiable.

If we refuse a request, we will give you the reasons, the provision of the law the refusal rests on, and the remedies available to you along with the time limit for exercising them.

16. Automated decisions

We make no decision about you based exclusively on automated processing, with one exception, named below. The progress data described in section 3 is used to judge levels, never people.

The exception: personalised suggestions for our own games (§17.2), and only if you have turned them on. Which game you are suggested is then chosen automatically, from your profile alone. That decision covers only what you are shown: it has no legal effect, it touches neither your rights, your purchases, your progress nor the price of anything, and it takes nothing away from you. You can turn it off at any time, in the in-game settings and in your profile on our website, and we then show you the same suggestions as everyone else.

17. Identification, location or profiling technologies

The profile identifier described in section 4 is an identification technology. It is off by default, it is created only if you create a profile, and you can turn it off at any time in the in-game settings, which deletes it along with everything attached to it.

So are the cookies that keep your profile open on our website (§5.2). They exist only because you asked to open your profile, they identify that profile and nothing else, and signing out ends them.

Our games contain no location technology. We never use your device's precise location (GPS).

17.1 In-game rewards and offers

Your game may ask our servers whether your profile is entitled to anything: a progress reward, a comeback bonus after time away, or a gift tied to how long you have had your profile. The answer is computed for your profile alone, at the moment your game asks, from what section 1 already says we keep. We never compare profiles against one another to choose who gets what, and an offer is never sized by what you have already spent.

17.2 Personalised suggestions and advertising

Our games may show you our other games and services, and advertising we sell ourselves. When the same thing is shown to everyone, nothing about you is used to choose it and nothing is asked of you. That is the default.

If, and only if, you turn personalisation on, what you are shown, and how often, are decided from your profile alone: which of our games this profile has already used, and how long ago. A game you played a long time ago may therefore be suggested more often than one you have never opened, and an advertisement for a card game may be shown to someone who has played ours. That is the only thing personalisation uses.

How the choice is made, precisely. Your game asks our servers what it should show you. Our servers evaluate the campaign's rule against your profile alone, at the moment your game asks, and answer. We build no list of people and we never compare profiles against one another. An advertiser buys a rule; it never buys an assembled audience and never picks anyone in particular.

What the advertiser receives. Numbers, and nothing else: how many times its advertisement was shown, how many times it was tapped. Never your profile identifier, never your device, never anything that identifies you, directly or by cross-referencing. Targeting happens on our servers, which the advertiser cannot reach. We sell space, never information (§8).

This choice is off by default. It is asked separately from the others (§7) and it is a condition of none of them. You can withdraw it at any time, in the in-game settings and in your profile on our website, and withdrawing is as easy as accepting. You will still see suggestions and advertising; they will simply stop being chosen based on you.

What does not change, whether you turn it on or not:

• no advertising network, no third-party advertising SDK, no advertising identifier. What you are shown comes from our servers;
• nothing about you is disclosed to a third party (§8 and §9), advertisers included;
• we never compare profiles against one another to choose who sees what;
• nothing is sized by what you have spent;
• neither your location nor the region inferred from your IP address is used for anything: section 1 records both as "Never", and that does not change;
• the usage statistics in section 3 are never used for it (§3.2).

18. Governance and complaints

We maintain policies and practices governing the retention and destruction of information, roles and responsibilities, the handling of requests and complaints, and the management of privacy incidents. Absent a written delegation, the person exercising the highest authority within the enterprise acts as Privacy Officer.

Step 1: write to the Privacy Officer, at support@legarius.games. We answer within 30 days.

Step 2: if you are in Québec, you may complain to the Commission d'accès à l'information du Québec. If you are elsewhere in Canada, you may contact the Office of the Privacy Commissioner of Canada.

19. Privacy Officer

Privacy Officer / Responsable de la protection des renseignements personnels support@legarius.games

20. Governing law

This policy is governed by the Act respecting the protection of personal information in the private sector (Québec) and by the Personal Information Protection and Electronic Documents Act (Canada).

21. Language

This document is written in French. An English translation is provided for information only; in case of any discrepancy between the two versions, the French version prevails.

22. Changes

When we add a feature that collects information, or change the purpose of information we already collect, we publish a new version of this policy before or at the same time as the version of the game that contains it, we update Google Play's "Data safety" form in the same release, and the corresponding row appears below. Earlier versions remain available.

If the change is material (a new purpose, a new category of information, or a first third party in the path of your data), we notify you and ask for your consent again rather than assuming the old consent covers the new thing.

Version	In effect	What changed
0.1 (draft)	2026-08-01	Initial version.