Privacy Policy

Last updated: October 25, 2026

This is a translation of the French original. If the two versions differ, the French version prevails.

At Débattr, we only ask for what's strictly necessary to play. This page explains what data we keep, why, for how long, and how to have it deleted.

1. Who is responsible for your data

The publisher of Débattr, Farès Gaudillat, who can be reached at debattr75@gmail.com.

2. What data we collect

• Email: to create your account, sign you in, and contact you if needed (security, moderation). It is never shown to other players. If you sign in with Apple or Google, they're the ones who send us your email (or a relay address, if you choose to hide yours with Apple).
• Date of birth: only to check that you meet the minimum age. It is never shown to other players.
• Username and avatar: to show you to other players.
• Your messages, votes, reactions, debates created and Versus participations: to make the game work. They are visible to other players.
• Points, gems, badges, items bought, Versus streak: for leaderboards, the shop and rewards.
• The reports and blocks you make or receive: for moderation and community safety.
• Feedback you send us (“Give feedback”): read only by the team, to improve the game. It's never shown to other players.
• Your settings (notifications, theme, sorting, app language and debate languages): to keep your preferences and show you debates, the leaderboard and notifications in your language.
• Your phone's notification identifier (provided by Apple, or by Google with Firebase Cloud Messaging): to send you the notifications you've accepted.
• Technical data (IP address during exchanges with our server, sign-in and last-visit dates): to run and secure the service.
• Crash reports (with Firebase Crashlytics, at Google): if the app crashes, a technical report is sent (phone model, system and app version, the place in the code where it failed), so we can fix the bug. It contains no username, email or messages.
• A fingerprint of your phone (a code computed from an identifier of the app on your phone, from which that identifier can't be recovered) and the invitation link you arrived through: only for invitations, to check that one phone doesn't create several accounts to earn gems. It is never shown to other players.

What we don't do: no advertising, no selling of data, no ad tracking, no geolocation, no access to your contacts or photos (the app can only save a debate's image there, if you choose to).

3. On what legal basis

• The contract, meaning the terms of use you accept when you sign up: account, game, leaderboards, shop.
• Our legitimate interest: moderation, fighting cheating and abuse, security, fixing app crashes.
• Your consent: notifications. You can turn them off at any time in Settings or in your phone's settings.
• A legal obligation: keeping certain connection data and responding to the authorities.

4. Gem purchases

Purchases are made through Apple (App Store) on iPhone and through Google (Google Play) on Android. We never see your bank card. The store only tells us that a purchase took place, so we can credit your gems. Apple and Google process your payment data under their own privacy policies.

5. Who can see your data

• Other players: your username, your avatar and the items you wear, what you post (messages, debates, leaderboard position), your badges and your game stats (number of votes, messages, people convinced), whether you're online right now and how long since you last came by ("Seen … ago"). Your side in a debate is visible too, since it's shown on your messages.
• Our service providers, only to run the app: our host Supabase, whose servers are located in Paris, and Apple and Google, for distributing the app, payments, sending notifications (Firebase Cloud Messaging at Google), crash reports (Firebase Crashlytics at Google) and signing in with your Apple or Google account. The Débattr website is hosted by Netlify, which only sees the technical information of your visit (IP address, browser).
• The authorities, only if the law requires us to.

These providers only use your data to provide this service to us and must protect it at least as well as we do.

If a provider processes data outside the European Union (for example Apple, Google, Netlify, or Supabase for the maintenance of its servers, in the United States), this transfer is covered by the safeguards provided for by the GDPR.

6. How long we keep it

• Account and game data: as long as your account exists.
• After your account is deleted: everything is erased within 30 days. Your public messages remain visible but become anonymous (“Deleted account”), so that discussions stay readable.
• Inactive account: deleted after 3 years without signing in, after warning you by email.
• Connection data: 1 year (legal obligation).
• Crash reports: 90 days.
• Reports and sanctions: 1 year after the decision.

7. Your rights

At any time, you can:

• access your data and receive a copy of it;
• correct it;
• delete it: Profile → Settings → Delete my account does it directly in the app (without the app: debattr-app.netlify.app/supprimer-compte.html);
• object to processing or request its restriction;
• get your data back in a readable format (portability).

Just email debattr75@gmail.com. We'll reply within one month at most.

If you think your rights aren't being respected, you can file a complaint with the CNIL (the French data protection authority): www.cnil.fr.

8. Minimum age

Débattr is for people 15 and older. If we learn that an account belongs to someone younger, it is deleted.

9. Security

Your data is transmitted encrypted and stored with a secure host. Only the people who need it to run Débattr have access to it.

10. Changes

If this policy changes significantly, we'll let you know in the app before it applies.