Privacy Policy

This English version is provided for information purposes only. In the event of any discrepancy, the French version prevails.

Website & Shop

Last updated: January 1, 2026

This Privacy Policy describes how Arkada Studio collects, uses, retains, and protects personal data in connection with the use of the arkada.studio website and, where applicable, the online shop.

1. Data Controller

ARKADA STUDIO

SAS registered with the Rouen Trade and Companies Register under number 881 197 388

Registered office: 538 rue aux Saulniers, 76320 Saint-Pierre-lès-Elbeuf, France

GDPR contact: rgpd@arkada.fr

2. Scope

This policy covers :

• browsing the arkada.studio website

• the "Contact us" form / contact channels

• newsletter sign-up

• the shop (if active): orders, payment via a service provider, delivery, invoicing

• cookies and trackers used on the website

⚠️ Arkada Studio's mobile applications (ERUNE, Spark Riders 3000, Sifflard, etc.) are governed by a separate "Mobile Applications" Privacy Policy.

3. Data collected

3.1 Browsing and technical data

• IP address (under the conditions provided for by security/audience measurement tools)

   

• Technical browsing data (browser type, OS, pages viewed, date/time)

Purposes: security, website operation, audience measurement.

3.2 Contact form

• Name (if provided)
  
• Email address
  
  
• Message content

Purposes: responding to inquiries, customer service follow-up, business correspondence.

3.3 Newsletter

• Email address

• Any preferences

Purposes: sending Arkada Studio news, product information.

3.4 Shop (if activated)

• Identity: first name, last name

   

• Contact details: email, phone (if required), delivery and billing address

• Order details (products, quantities, history)

   

 

Payment: Arkada Studio does not store bank card data. Payments are processed by a payment service provider.

4. Purposes and legal bases

5. Cookies and trackers

• Cookies strictly necessary for operation (e.g., cart, security)

• Audience measurement cookies (if activated)

• Marketing cookies (only with consent)

 

Users can manage their preferences via the cookie banner/preference center. The exact list depends on the website's configuration; Arkada Studio undertakes to keep it up to date in the preference module.

6. Recipients and processors

• Arkada teams (support, admin, sales, communications)

• Technical service providers (host, emailing tool, shop provider, payment provider, analytics tool), solely to carry out their services

Arkada Studio requires its processors to provide confidentiality and security guarantees compliant with the GDPR.

7. Data location and transfers

Arkada Studio favors service providers hosting data within the European Union. In the event of a transfer outside the EEA, appropriate safeguards are put in place (adequacy decision or Standard Contractual Clauses).

8. Retention periods

9. Your rights

In accordance with the GDPR: access, rectification, objection, erasure, restriction, portability.

Contact: rgpd@arkada.fr

You may also lodge a complaint with the CNIL: www.cnil.fr

10. Security

Arkada Studio implements appropriate measures (access control, service security, best practices). No measure can guarantee zero risk.

11. Updates

This policy may be amended to reflect legal, technical, or functional changes. The applicable version is the one published on the website.

Privacy Policy

Arkada Studio Mobile Applications

Last updated: June 1, 2026

This Privacy Policy describes how Arkada Studio collects, uses, retains, and protects personal data in connection with the use of its mobile applications and hybrid games, in compliance with Regulation (EU) 2016/679 (GDPR) and the amended French Data Protection Act (Loi Informatique et Libertés).

1. Data Controller

ARKADA STUDIO

SAS registered with the Rouen Trade and Companies Register under number 881 197 388

Registered office: 538 rue aux Saulniers, 76320 Saint-Pierre-lès-Elbeuf, France

GDPR contact email: rgpd@arkada.fr

2. Scope of application

This Policy applies to:

• all mobile applications published by Arkada Studio (iOS and Android)
  
• hybrid games associated with Arkada physical products (ERUNE, Spark Riders 3000, Sifflard, and future games)
  
  
• all users, players, or account holders, including minors using the Application under the responsibility of a legal guardian

3. General principles

• Data minimization: only data strictly necessary for the game's operation is collected

• No third-party advertising targeting: no data is used for third-party advertising, marketing profiling, or resale purposes. Arkada Studio uses an internal telemetry tool to improve its Applications and send push notifications

• Transparency: purposes and retention periods are clearly defined

• Security: appropriate technical and organizational measures are implemented

• Respect for the player: data is used exclusively for the gaming experience and user support

4. Categories of data collected

4.1 Account data

• Email address

• Password (stored in hashed form)

• Internal account identifier

Purpose: account creation and management, authentication, saving and restoring games.

4.2 Data related to Arkada products

• Box activation information (QR code, box type, Standard / Deluxe / other version)

• Box ↔ user account linking

Purpose: unlocking content, fraud prevention, technical support.

4.3 Technical and diagnostic data

• Device type

• Operating system version

• Anonymized error logs and crash reports

Purpose: stability, bug fixing, continuous improvement of the Applications.

4.4 Voice data (applicable games only)

Games concerned: ERUNE, Spark Riders 3000

• Audio data transmitted when using voice commands

Key characteristics:

• Optional activation, subject to explicit consent

• No retention of audio recordings

• Data not linked to the user account

Purpose: recognition and interpretation of voice commands during play.

4.5 Data displayed in the credits

• • First name + last initial, or public pseudonym

Source: crowdfunding platforms (Kickstarter, Gamefound, Game On Tabletop). No payment data, email, or full identity is displayed.

4.6 Telemetry data and FCM token

Games concerned: ERUNE, Spark Riders 3000, Salami

• FCM (Firebase Cloud Messaging) token linked to the user account
  
  
• Timestamped in-Application browsing behavior data

Key characteristics:

• Tool entirely internal to Arkada Studio — no third-party access

• No resale, no transmission to advertising partners

• The FCM token passes through Firebase (Google) infrastructure, a technical processor within the meaning of the GDPR

Purposes:

• Primary: understanding browsing behavior to improve the clarity and intuitiveness of the Applications

• Secondary: triggering push notifications tailored to user behavior

5. Data not collected

Arkada Studio never collects:

• payment data

• geolocation data

• advertising data

• inter-application browsing data (browsing within the Application itself is collected

• via Arkada's internal telemetry tool, see section 4.6)

• biometric data

• data from social networks

6. Legal bases for processing

• Performance of the contract (Terms of Use): account, saves, game activation

• Consent: voice recognition, microphone access, push notifications

• Legitimate interest: technical stability, security, fraud prevention, display of contributor credits, internal telemetry (improvement of the Applications)

• Legal obligations, where applicable

7. SDKs and third-party services

7.1 Technical SDKs

Arkada Studio's Applications do not integrate any third-party advertising SDK.

SDKs used :

• Google Analytics for Firebase (diagnostics mode only): crash reporting, anonymized technical data

• Firebase Cloud Messaging (FCM): management and delivery of push notifications. The FCM token is linked to the user account within Arkada's internal telemetry tool

• Arkada internal telemetry: tool developed and operated exclusively by Arkada Studio. Collects timestamped browsing data linked to the user account. No third-party access to the data collected

7.2 Voice recognition

Technical providers (depending on the game):

• Arkada API
  
  
• Dialogflow (Google), configured in the Europe region

No secondary use, no model training based on Arkada's data.

8. Data location and transfers

• Data hosted primarily within the European Union

• United Kingdom: only under an adequacy decision

• Outside the EEA: only with appropriate safeguards (Standard Contractual Clauses)

   

 

Details by game are specified in the Game Appendices of the Terms of Use.

9. Retention periods

10. Rights of individuals

In accordance with the GDPR, the User has the following rights:

• right of access
  
  
• right to rectification
  
  
• right to object
  
  
• right to erasure
  
  
• right to restriction
  
• right to portability

Any request may be sent to: rgpd@arkada.fr

Proof of identity may be requested in case of legitimate doubt.

11. Minors

• Use by a minor is the responsibility of the legal guardian

• No voluntary collection of data specific to minors
  

• No targeting, no advertising

   

Store age classifications are authoritative (PEGI / IARC).

12. Security

• Encryption of sensitive data

• Password hashing

• Restricted access to data

• Security audits and updates

   

Despite these measures, no system is entirely free of risk.

13. Policy amendments

This Policy may be updated to reflect legal or technical changes, or the addition of new games or features. The applicable version is the one accessible within the Application or on the Arkada Studio website.

14. Contact

For any questions relating to data protection:

rgpd@arkada.fr

15. Complaints

The User may lodge a complaint with the CNIL: www.cnil.fr