Privacy policy

In short. Chouquest processes the minimum needed to run your company’s games: your account, your game results and, if you agree, what it takes to send you notifications. No ads, no data sold, no tracking of the hours you play. You can delete your account at any time from your profile.

Who is responsible for your data

Chouquest is published by [TO COMPLETE: company name, legal form, address], see the legal notice.

Companies use Chouquest for their employees. For the game data processed in your company’s space, your employer decides how Chouquest is used and Chouquest acts on its behalf, under a data processing agreement (DPA). For the chouquest.com website, the security of the service and the accounts themselves, Chouquest is the controller. [TO VALIDATE: split of roles with a lawyer.]

Contact for any question about your data: [TO COMPLETE: dedicated address, for example privacy@chouquest.com].

The data processed

Data	Examples	Why
Account	Name, email address, password (stored irreversibly encrypted, never readable), company, team, role, job title given by an administrator	Signing you in and linking you to your company
Sign-in	Open sessions, IP address and browser of each session	Account security
Games	Matches, moves, scores, streaks, challenges between colleagues, predictions, advent calendar openings, prizes won	Running the games, rankings and profiles
Phone	Notification token and preferences (morning reminder, challenges, advent calendar)	Sending you the notifications you turned on
Technical logs	Errors and response times, without your name or email	Fixing failures

Chouquest collects neither your location, nor your contacts, nor your photos. Profiles and rankings show game results, never the days or hours you played. No decision about you is made automatically.

The chouquest.com website sets no cookies and uses no audience measurement tool.

On what basis

• Performance of the contract with your employer, and of our terms of use: account, games, rankings, account emails (address confirmation, invitations).
• Legitimate interest: security of the service and accounts, technical logs.
• Consent: notifications on your phone, which you allow in the app and can turn off at any time in your profile or your phone’s settings.

Who receives your data

• Your colleagues in the same company see your name, job title, team and game results. Your company’s administrators also see your email address. Other companies never see your data.
• Our processors, each for its own part:

Processor	Role	Location
[TO COMPLETE: application host]	Hosting the application and its database	France
Cloudflare	Network, protection against attacks, hosting of chouquest.com	European Union and United States (Data Privacy Framework)
Apple	Sending notifications to iPhones	United States (Data Privacy Framework)
[TO COMPLETE: Brevo, once connected]	Sending emails	France

If your company signs in through SSO, its own identity provider confirms your identity to Chouquest.

For how long

• Account and game data: as long as your account exists. They are deleted as soon as you delete your account, or at the end of your company’s contract [TO COMPLETE: delay]. If an administrator removes you from the company, you lose access to it, but your results stay there until your account is deleted.
• Sessions: seven days after their last use.
• Technical logs: [TO COMPLETE: duration, for example 30 days].
• Backups: [TO COMPLETE: retention of backups].

Your rights

You can access your data, have it corrected or deleted, ask to restrict its use, object to processing based on legitimate interest, and receive it in a reusable format.

• Delete your account: from your profile, “Delete my account”. Deletion is immediate and final.
• Anything else: write to the contact address above. We answer within one month.

If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority.

Changes

We update this page when the data processed or our processors change. The date of the last update is at the top of the page.