Privacy Policy

In brief

• You are never asked for an account, a name or an email address to play or vote.
• The website never stores your IP address as such: only a fingerprint computed with a secret key, which cannot be turned back into the address, is kept.
• Advertisements are always non-personalised: they are never chosen based on your browsing.
• Audience measurement (Google Analytics) only runs if you accept it in the cookie banner.
• No data is sold or rented.

Data controller

The data controller is the website publisher, a private individual acting on a non-professional basis (see the Legal Notice). Contact: [email protected].

Data processed, purposes and legal bases

Votes (thumbs up, thumbs down)

When you vote for the first time, your browser creates a random identifier, which is kept on your device. The server only receives a fingerprint of it (SHA-256). For each vote, it records: this fingerprint, the game, the vote (for or against), its date, the country you are connecting from (two-letter code) and a fingerprint of your IP address calculated with a secret key (for an IPv6 address, a fingerprint of its network part, shared by the devices of a household). The IP address itself is never stored.

Purposes: counting votes, keeping only one vote per game and per device, ranking the games, and detecting abuse. Legal basis: the publisher's legitimate interest in providing a reliable ranking (Article 6(1)(f) GDPR).

Game session statistics

When you leave a game, the website records: the game, the length of the session, the country you are connecting from, the type of device (phone or computer), the game's first technical error if there was one, and a fingerprint of your IP address calculated in the same way (for an IPv6 address, of its network part, which may be shared by a few neighbouring households). No cookie is used for this.

Purposes: displaying the “Trending” section (the most played games of the week), counting different players so that a single device or a bot cannot skew this ranking, and detecting games that do not work. Legal basis: legitimate interest (Article 6(1)(f) GDPR).

Audience measurement (Google Analytics)

If you accept cookies in the banner, the website uses Google Analytics 4 (Google Ireland Limited); otherwise, it is not loaded and receives no data. Google Analytics records: pages viewed, game starts (name of the game), votes (name of the game; for, against or cancelled), language, type of device, browser, country and approximate city, derived from the IP address, which is not stored. A random identifier is kept in the _ga and _ga_HTQ7RNYW3J cookies (see the Cookie Policy). Google Signals and ad personalisation signals are disabled: this data is never used to show you advertisements.

Purposes: finding out how many people play, which games they enjoy, and improving the website. Legal basis: your consent (Article 6(1)(a) GDPR and Article 82 of the French Data Protection Act), which you can withdraw at any time using the “Cookie settings” link at the bottom of every page; the website's Google Analytics cookies are then deleted.

Protection against bots (Cloudflare Turnstile)

Each vote is checked by Cloudflare Turnstile, which is only loaded when you vote. Cloudflare analyses technical data (IP address, browser characteristics) to tell a person from a bot. Legal basis: legitimate interest in protecting votes against fraud (Article 6(1)(f) GDPR).

Hosting

Like any hosting provider, Cloudflare processes connection data (IP address, pages requested, date and time) to display the website and protect it against attacks. Legal basis: legitimate interest (Article 6(1)(f) GDPR).

Google AdSense advertising

The website may display a Google AdSense advertisement, at the bottom of the home page only (never in the games). These ads are always non-personalised and requested with child-directed treatment: no targeting based on your interests, no remarketing. Google may set advertising cookies only if you accept them in the banner; otherwise, no advertising cookie is read or set. Google also processes technical data (IP address, browser) to display the ad, count it and prevent fraud.

Legal basis: your consent for cookies (Article 6(1)(a) GDPR and Article 82 of the French Data Protection Act), which you can withdraw at any time using the “Cookie settings” link at the bottom of every page.

Data kept on your device

The language you choose, your votes, your progress in the games, your cookie choice and the games kept for offline play are stored in your browser, not on our servers. Details are given in the Cookie Policy.

Emails

If you write to us, your email address and your message are used only to reply to you. Legal basis: legitimate interest in answering requests (Article 6(1)(f) GDPR).

Retention periods

• Votes: for as long as they are used to rank the game. Tapping the same thumb a second time cancels the vote, which is then deleted from the database.
• Game session statistics: 13 months at most, then automatically deleted.
• Cookie choice: 6 months, after which the banner is shown to you again.
• Google Analytics cookies (_ga, _ga_HTQ7RNYW3J): 13 months at most, not extended on each visit.
• Audience measurement data in Google Analytics: 2 months, then automatically deleted (only anonymous totals remain in the reports).
• Google AdSense cookies: 13 months at most (see the Cookie Policy).
• Connection and security data processed by Cloudflare: for a limited period, in accordance with Cloudflare's privacy policy.
• Emails: for the time needed to handle your request, then 1 year at most.
• Data kept on your device: until you delete it (browser settings).

Recipients and transfers outside the European Union

Only the publisher has access to the data recorded by the website. It is processed on the publisher's behalf by Cloudflare, Inc. (hosting, database, Turnstile) and, for audience measurement and advertising, by Google (Google Ireland Limited and Google LLC). These companies may process data in the United States; these transfers are governed by the EU–US Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023) and by the European Commission's standard contractual clauses.

Your rights

You have the right of access, rectification, deletion (erasure), objection and restriction of processing, as well as the right to data portability and the right to set instructions regarding what happens to your data after your death. You can withdraw your consent to cookies at any time, as easily as you gave it.

To exercise these rights, write to [email protected]. You will receive a reply within one month. As the website knows neither your name nor your email address, it is not always possible to find the data linked to your device: you can also cancel your votes yourself and delete the website's data at any time in your browser settings.

Complaints to the CNIL

If you believe that your rights have not been respected, you can lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, website: www.cnil.fr.

Children and minors

Free Micro Games is intended for families, including children. The website offers no accounts, no chat between players and no forms, and does not ask for any personal information.

Minors under 15: in France, a minor under 15 cannot consent alone to the processing of their data for these services (Article 8 GDPR and Article 45 of the French Data Protection Act); consent must be given jointly by the child and a person with parental responsibility. This is why the cookie banner asks children to have a parent make the choice. Whatever the choice, advertisements remain non-personalised, and audience measurement is never used for advertising.

COPPA (United States): the website is partly directed at children under 13. It does not knowingly collect personal information from children within the meaning of the US Children's Online Privacy Protection Act (COPPA), apart from technical identifiers used solely for the website's internal operations (counting votes, security, statistics, including Google Analytics audience measurement, accepted in the banner and never used for advertising). Ad requests are flagged for child-directed treatment: no behavioural advertising and no remarketing.

If you are a parent and believe that your child has sent us personal information (for example by email), please write to us: it will be deleted.

Security

The website is served over HTTPS only. The games run in an isolated frame, with no access to the Internet. IP address fingerprints are calculated with a secret key and cannot be used to recover the address.

Changes

This policy may change, for example if the website changes. The date of the last update is shown at the top of the page.