Application: Donjons & Savons
Region: France
Audience: Adults (18+)
Version: 1, in force as of 22 September 2026
The controller for the processing of data of the "Donjons & Savons" application is Grisloup, the trading name of MARCHAL DE GREEF Guillaume, sole trader, 20 rue Lavoisier, 95300 Pontoise, France, SIREN 109354092, RCS Pontoise, grisloup.com. For any question about your data or to exercise your rights, write to donjons@grisloup.com.
This policy supplements the Application's Terms of Service, of which it forms an integral part.
Donjons & Savons is designed around the principle of minimisation: the application only collects what is strictly necessary for it to work.
| Data | Details |
|---|---|
| Account identifier | The technical identifier of your Google account (we store neither your name nor your email address in the game data). |
| Region | The storage region selected (today: France). |
| Legal status | The single distinction minor / adult. Your date of birth is never kept: it is only used, at first sign-in, to compute that status, and is then forgotten. |
| Nicknames | Your character's nickname and your clan's name, chosen by you, together with the descriptions you give them. They are only visible to the members of your clan. If you belong to several clans, your character's nickname, your avatar and the title you wear are also seen by the members of your other clans, and by them only: no other clan sees anything. Both the character's nickname and the clan's name also have an external version generated by the application, unrelated to the one you chose: it is the only one the application would use to designate you outside your clan. |
| Game data | Avatar, experience, levels, hit points, gold, items, completed chores, clan activity log, last connection date, interface language, records of terms-of-service acceptance. |
| Records of binding acts | When an act commits someone, a record of it is kept with the evidence of terms acceptance, under the account of the person who acts: joining a clan, leaving a clan (by oneself, or removal of a minor by their legal guardian), dissolution of a clan by its founder, each action of a legal guardian (authorising a clan, removal from a clan, recognition of another legal guardian and that guardian's declaration, withdrawal or restoration of consent, declaration of majority), and creation of a minor's representation at their first clan. It contains only the author, the minor or clan concerned, the date and the session context (region, language, legal status). |
| Notifications | A technical token for sending notifications, associated with your device. From your phone, you can turn off notifications for the current clan or for all your clans: our servers then send nothing more to that phone. This setting is stored with its notification registration, with no other data. |
| Technical settings | The version of the application installed, and the device's time-zone offset. The latter serves one purpose only: to send the reminders meant for a child at a reasonable hour where they live, and not in the middle of their night. This is not location data: the application never measures nor asks for your position. |
Above all, what the application does not collect:
The subscription and purchases benefit the clan: the status of the clan's subscription (active or not, and its expiry date) and the list of content bought in the shop make them available to all its members. The purchase information, on the other hand, is attached to the person who paid: their account identifier, the purchase reference and Google Play order number, the product bought and its dates. This information is passed to us by the platform; it contains no amounts and no financial data.
The information you declare to the Application (date of birth, status as the legal guardian of a minor) is purely declarative and is not verified with any third party. You are solely responsible for it (section 3 of the Terms of Service).
The game's website also carries a beta waiting-list form, which collects an email address. That processing is separate from the application and is described in section 12.
| Purpose | Legal basis |
|---|---|
| Providing the game: accounts, clans, chores, progression, rewards, operational notifications | Performance of the contract (the Terms of Service) |
| Collecting the game data of a minor player | Consent of their legal guardian (Article 8 GDPR) |
| Generating, on request, name suggestions and the clan's adventure story | Performance of the contract (game feature), triggered by an explicit action of the user |
| Keeping evidence of terms acceptance | Legal obligation and legitimate interest (evidence) |
| Managing the clan's subscription and the content bought in the shop | Performance of the contract (the Terms of Service) |
Use of the application by a minor is subject to the consent of their legal guardian. That consent is given by the adult when they accept the Terms of Service (section 6 of which sets out that undertaking precisely) and it is exercised when that adult invites the minor into their clan or creates a player profile for them. Acceptance of the terms is time-stamped and kept.
At the very moment of that act (inviting a member, creating a player profile) the application reminds the adult that they are declaring they are the minor's legal guardian, or, when the minor already belongs to another clan, that they have received that guardian's prior authorisation, which the application checks, and that they consent to the collection of their data, and gives them access to the terms of service. That declaration is their responsibility alone: the application performs no verification of the guardianship relationship.
The minor's wish. Before the adult decides, the minor indicates, on their own device, whether they wish to play. That wish contains no personal data: only the date it was expressed, the language, the region, the version of the text shown to the minor and a random six-character verification code. It is shown to the adult as a QR code, or sent to them as a link, and the adult reads it before deciding. It is recorded together with the adult's decision, under the adult's account, then attached to the minor's profile when the minor joins the clan; it is kept in the same way as the records of acceptance of the terms. Until the minor has signed in to their account, no information about them is recorded, either on their device or on our servers, not even the language chosen.
A minor's data. A minor's data are those of any player, described in section 2, and no more. A minor whose player profile was created by an adult has no Google account: no email address exists for them. If the minor signs in with their own Google account, no email address is stored in the game data; the address of that account is held by the Firebase authentication service, our processor, solely for authentication purposes (section 7). When this minor later receives their own phone, the adult who welcomes them into the clan can designate the player profile they had created for them: the minor then gets back this profile and its game data under their own account, after expressing their wish to play and subject to the same decision by the adult as for any entry into the clan.
Representation of a minor. For each minor who plays on their own phone, the application keeps a representation record: who their legal guardians are, the list of their clans (name of the clan, name of its chief, adult who brought them in, date), the authorisations given to other clans, and the history of each legal guardian's actions (withdrawal or restoration of consent, declaration of majority, authorisation of a clan or removal from it, addition of a legal guardian and that guardian's declaration). This record is visible only to the minor and their legal guardians: the guardians thus see the name of each of the minor's clans and the name of its chief, and nothing else from those clans. The nickname, the avatar and the title worn by the minor are the same in all their clans: the members of each of those clans can see them. The rest of their game data (experience, level, items, chores, activity log) stays specific to each clan. This record is evidence, kept under the conditions of section 8.
A minor cannot create a clan or join the game on their own: entry into a clan happens only by invitation from an adult, by QR code or by an encrypted link protected by a confidential code. The threshold is 18: any player under 18 is subject to their legal guardian's consent, without exception. The application is therefore stricter than Article 8 of the GDPR, which lets each Member State set between 13 and 16 the age of a minor's own digital consent (15 in France): we never rely on that option. A version of this policy written in accessible language is shown to minor players.
The application offers three kinds of sharing, always at the initiative of an adult of the clan and through the sharing applications on your device:
Once shared, this content is beyond our control and is governed by the terms of the destination service (messaging app, social network, etc.). We encourage you to bear this in mind before sharing, particularly where the content mentions children.
On first use, you select a storage region. Your data is stored in that region (for France: data centres located in the EU). This choice cannot be changed and data cannot be migrated from one region to another: if the application is reinstalled, a region will have to be selected again and data associated with another selection will not be transferred.
Two exceptions, inside Google. Two technical services of our hosting provider do not let us choose where they run. Sign-in (Firebase Authentication), which checks your login, runs only from Google data centres in the United States: it processes your account identifier there and, if you have linked a Google account, its email address. Notification delivery (Firebase Cloud Messaging) goes through Google's global network: it processes your device token and the text of the notification. These operations stay inside Google, our processor: no other company has access to them, and your game data (clan, characters, chores, journal) stays in your region. They are covered by the safeguards in Google's contract: the European Commission's standard contractual clauses and Google LLC's certification under the Data Privacy Framework.
Each region has its own terms of service and its own privacy policy, adapted to the law applicable to it. This policy is the one for the France region. The list of open regions and the full set of their documents is available at donjons.grisloup.com/en/legal.
Exchanges between the application and our servers are encrypted. Access to data is restricted by security rules that isolate each clan: a clan cannot view another clan's data, and there is no directory allowing players or clans to be enumerated.
Deleting an account happens in three stages: immediate functional deletion (account unusable, profile removed from the clan, data no longer exposed in the game), then a limited retention period outside the service, then permanent erasure.
Beta waiting list: deleted in full at the end of the beta phase, or earlier on request (section 12).
Under the GDPR, you have the rights of access, rectification, erasure, restriction, objection and portability over your data, as well as over the data of minors for whom you are the legal guardian. To exercise them:
You may withdraw your consent at any time: both your own and the consent you gave as legal guardian for a minor you let play.
For a child you make play, withdrawal is exercised from the application, in their character management menu: the option “Withdraw my consent and erase this child's data” is offered, for a child who plays on their own phone, only to their legal guardians, and not to the other chiefs of their clan of origin; for a child who plays on an adult's phone, to the chiefs of their clan. The withdrawal applies to all of the child's clans. It takes effect immediately (the child no longer plays and their data is no longer exposed in the game) then, after a 3-day reflection period during which an adult to whom the option is offered may reverse the decision, their game data is deleted in all their clans, then kept for 30 days under the conditions of article 8 before its definitive erasure. At the end of that period, our servers carry out the deletion, even if the child never reopens the application. A legal guardian may also remove the child from just one of their clans, except their clan of origin: their data in that clan is then erased like that of any player who leaves it.
For your own consent, withdrawal is exercised by deleting your account, from the application or via donjons.grisloup.com/delete-account.
Withdrawing your consent ends the processing of the child's data. It does not prevent another responsible adult from one day inviting them into another clan, under their own responsibility: we keep no list of excluded children, because it would mean holding information indefinitely about a child whose complete erasure we have just been asked for. A child, however, can never enter alone: it always takes the invitation of an adult who declares that they answer for them.
For a minor, deleting the clan chief's account dissolves that clan and, by cascade, the profiles of the minors whose clan of origin it was, as well as any profile that no longer belongs to an active clan, including children without their own account, whose game data exists only within the clan. The withdrawal then takes effect for them as it does for you. However, the only legal guardian of a minor cannot delete their own account: they must first have another legal guardian recognised, or delete the minor's account. A minor who keeps another legal guardian is not deleted when one of their legal guardians deletes their account.
Withdrawal only applies going forward: in accordance with Article 7(3) GDPR, it does not affect the lawfulness of processing carried out before it. That is precisely why the evidence of the consent obtained, and of the date on which it was withdrawn, is kept under the conditions of section 8.
If you would rather not go through account deletion, write to donjons@grisloup.com: we will handle your request within one month.
This policy may change, in particular to support new features. Any new version is published at the same address and announced in the application. The version date appears at the top of the document.
The version in force of this document is published at fr-a-en-privacy-v1.html. All legal documents (every region, every audience and every language) are available from donjons.grisloup.com/en/legal.
If you believe your rights are not being respected, you can lodge a complaint with the supervisory authority of your country of residence, in France, the CNIL (www.cnil.fr).
This section is not about the application, but about the donjons.grisloup.com website, where a form lets you ask to be told when a test phase (a “beta”) opens.
The list is hosted on Google Cloud infrastructure in the European Union, whichever country you sign up from: it is independent of the game's region choice described in section 7. The rights set out in section 9 apply to this list as they do to everything else.