Skip to main content

Privacy policy

Introduction

This privacy policy describes how PronoGP (hereinafter “the Application”), published by Quentin Gans, collects, uses and protects your personal data in accordance with the General Data Protection Regulation (GDPR) and French data protection law.

Data controller

Quentin Gans
13 Avenue de Bordeaux
33360 Cénac, France

Contact : contact@prono-gp.com

Data collected

The Application collects the following data, necessary for its operation:

  • Identification data: name, email address, profile picture (avatar)
  • Game data: submitted predictions, scores, standings, league memberships
  • Technical data: push notification tokens (for sending reminders and results)
  • Authentication data: OAuth login credentials (Google, Apple) or encrypted password

Data collected by advertising services

The Application displays advertisements via Google AdMob (Google LLC). In this context, AdMob may automatically collect:
  • Device advertising identifier (IDFA on iOS, GAID on Android)
  • Technical information: device model, operating system version, language, network
  • Advertising interaction data (clicks, impressions)
  • IP address (used for approximate geolocation)

This data is collected and processed by Google in accordance with its privacy policy. PronoGP does not have access to individual data collected by AdMob.

Purposes of processing

Your data is processed for the following purposes:

  • Creating and managing your user account
  • Operating the prediction game (submission, score calculation, standings)
  • Managing leagues (creation, invitation, standings)
  • Sending push notifications (prediction reminders, results)
  • Displaying advertisements via Google AdMob
  • Improving the Application
The legal basis for processing is contract performance (terms of use accepted upon registration), your consent for push notifications, and legitimate interest for displaying advertisements (funding the free Application).

Data sharing

Your personal data is neither sold, rented, nor shared with third parties for direct commercial purposes.

It may be shared with:

  • Vercel Inc. — server infrastructure and database hosting (Walnut, CA, USA)
  • Apple / Google — OAuth authentication
  • Expo (EAS) — push notification service
  • Google AdMob — advertising and ad audience measurement

These providers act as data processors and are subject to contractual data protection obligations.

Transfers outside the EU

Some data may be transferred to the United States (Vercel, Apple, Google, Expo). These transfers are governed by the Standard Contractual Clauses (SCC) of the European Commission or the EU-U.S. Data Privacy Framework, ensuring an adequate level of protection.

Retention period

  • Account data: retained as long as the account is active, then deleted within 30 days of the deletion request
  • Game data: retained as long as the account is active, anonymized or deleted upon account closure
  • Push tokens: deleted immediately upon notification deactivation or account deletion
  • Advertising data: managed directly by Google AdMob according to its own retention policy

Cookies and similar technologies

The Application uses strictly necessary cookies for authentication (session cookies).

Additionally, the Google AdMob SDK may use cookies or similar technologies (advertising identifiers, local storage) for ad delivery and performance measurement.

No other tracking, analytics or profiling cookies are used. No third-party analytics tools (Google Analytics, etc.) are integrated.

Managing advertising preferences

You can limit ad tracking and ad personalisation:

  • iOS: Settings > Privacy > Apple Advertising > disable personalised ads
  • Android: Settings > Google > Ads > disable ad personalisation

These settings do not prevent ads from being displayed, but they will no longer be targeted based on your interests.

Data security

We implement appropriate technical and organisational measures to protect your data:

  • Encrypted communications (HTTPS/TLS)
  • Passwords stored as hashes (bcrypt)
  • Restricted database access
  • Secure OAuth authentication via trusted providers

Your rights

Under the GDPR, you have the following rights over your personal data:

  • Right of access: obtain a copy of your data
  • Right to rectification: correct inaccurate data
  • Right to erasure: request deletion of your data
  • Right to portability: receive your data in a structured format
  • Right to object and restrict: object to certain processing
  • Right to withdraw consent: withdraw your consent at any time (push notifications, personalised ads)

To exercise these rights, contact contact@prono-gp.com. We will respond within 30 days.

You may also file a complaint with the CNIL (French Data Protection Authority): www.cnil.fr

Minors

The Application is not intended for children under 16. If we learn that data from a minor under 16 has been collected without parental or guardian consent, we will delete it as soon as possible.

Policy changes

We reserve the right to modify this privacy policy at any time. In case of substantial changes, users will be notified via the Application. The date of the last update is indicated below.

Last updated: February 2026