Privacy Policy
Data Controller
- Anthony Guerrero, sole trader (auto-entrepreneur), France
- Email: [email protected]
- The data controller's postal address is available on request via the email above.
Data We Collect
When creating an account
- Email address
- User ID (auto-generated)
- Account creation date
When using the service
- Core balance and transaction history
- Current plan (free or MVP)
- Draft analysis history
- Connection timestamps (security logs)
When making a purchase
- Payment data processed exclusively by Stripe (Wild Rift Core stores no card numbers)
- Stripe customer ID linked to your account
- Transaction history (amount, date, offer type)
Navigation data (analytics)
- Pages visited, session duration, interactions (via Microsoft Clarity and Google Analytics)
- Anonymised IP address
- Browser type and device
Purposes and Legal Bases
| Purpose | Legal basis |
|---|---|
| Account authentication and management | Contract performance |
| Billing and subscription management | Contract performance |
| Transactional emails (confirmations, invoices) | Contract performance |
| Service improvement and usage statistics | Legitimate interest |
| Contextual advertising (Journey by Mediavine) | Consent |
| Fraud prevention and security | Legitimate interest |
Sub-processors
| Provider | Role | Country |
|---|---|---|
| Supabase | Database, authentication | Singapore / EU |
| Stripe | Online payments | USA (SCCs) |
| Resend | Transactional emails | USA |
| Cloudflare | Hosting, CDN | USA |
| Google Analytics | Traffic analytics | USA |
| Microsoft Clarity | Behavioural analytics | USA |
| Journey by Mediavine | Ad network and its programmatic partners | USA |
Retention Periods
- Account data: lifetime of account + 3 years after deletion (legal obligations)
- Billing data: 10 years (accounting obligation)
- Connection logs: 12 months
- Analytics data: 26 months maximum
Your Rights (GDPR)
Under the GDPR (EU Regulation 2016/679), you have the right to:
- Access: obtain a copy of your personal data
- Rectification: correct inaccurate data
- Erasure: delete your account and data
- Portability: receive your data in a standard format
- Objection: object to processing based on legitimate interest
- Restriction: temporarily restrict a processing activity
To exercise these rights, contact us at [email protected]. You may also lodge a complaint with your national data protection authority.
International Transfers
Some sub-processors are established outside the European Union (USA). These transfers are governed by standard contractual clauses approved by the European Commission or equivalent GDPR-compliant certifications.