Thalunia privacy policy
Last updated: October 10, 2026
This is the English version of the French policy (thalunia.app/confidentialite). If the two ever differ, the French version prevails.
1. Who we are
Thalunia is a mobile game published by Plixen, a French SASU with a share capital of €300, 14 rue Bausset, 75015 Paris, France, registered in Paris under number 981 321 342. Plixen is the controller of the data described here.
- Legal representative: Joffrey Giry, president.
- Contact about your data: contact@thalunia.app.
- Data protection officer: none is appointed, as Article 37 of the GDPR does not require one.
This policy explains what the game collects, why, who it is shared with and how to exercise your rights, under the General Data Protection Regulation (GDPR) and French data protection law.
2. Playing without an account
Thalunia starts without any sign-up. On first launch, the device creates a random player ID and a secret that proves it is really that player. Neither contains anything about you: no name, no email address, no phone number.
3. The data we process
Your game
- the player ID, and a fingerprint of the secret (never the secret itself);
- your progression: runs played and how they went, records, maps and content unlocked, seed and crystal balances, chosen looks.
This data is kept on our servers so your progression is never lost, and so a run can be checked by replaying it.
Account linking, if you choose it
From Settings, you can link your progression to an Apple or Google account, to get it back on another device. We then receive a stable identifier from Apple or Google, and nothing else from them. Linking is optional: without it, you play as a guest.
Your purchases
Purchases are paid to Apple or Google. We never see your payment details. We receive the proof of purchase (product, date, transaction ID) to credit what you bought, and to be able to help you if something goes wrong. If Apple or Google refunds a purchase, we are notified, to take back the crystals it brought.
Rewarded ads
Thalunia offers optional ads: they only play when you tap an offer, in exchange for a reward. They are served by Google AdMob (section 5).
Technical data
Our servers log requests (IP address, date, device) to keep the service secure and diagnose outages.
Your settings (language, sound, animations) stay on your device and are not sent to us.
Thalunia does not collect your precise location, contacts, photos or messages, and has no audience measurement tool to date.
4. Why, and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Run the game, keep and check your progression | Performance of a contract (Art. 6.1.b) |
| Link your Apple or Google account, when you ask | Performance of a contract (Art. 6.1.b) |
| Credit your purchases and answer your requests | Performance of a contract (Art. 6.1.b) |
| Keep the service secure, prevent fraud and cheating | Legitimate interest (Art. 6.1.f) |
| Show personalized ads | Consent (Art. 6.1.a) |
| Show non-personalized ads, measure their delivery | Legitimate interest (Art. 6.1.f) |
| Meet our legal obligations, accounting in particular | Legal obligation (Art. 6.1.c) |
5. Ads and consent
Ads are provided by Google AdMob (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When an ad is requested, Google's kit collects the IP address (which may be used to estimate an approximate location), interactions with the ad, diagnostic information and the device's advertising ID, for advertising, measurement and fraud prevention.
- In the European Union, the United Kingdom and Switzerland, the game asks for your consent before any personalized ad. Without consent, the ads shown are not personalized.
- On iPhone, the advertising ID is only used if you allow it in Apple's tracking prompt.
- You can change your choice at any time from the game's Settings, and reset or delete the advertising ID from your phone's settings.
Google's policy: policies.google.com/technologies/ads.
6. Who receives your data
- Plixen, as far as the service requires;
- o2switch (SAS, chemin des Pardiaux, 63000 Clermont-Ferrand, France), which hosts our servers in France;
- Apple and Google, for distributing the game, purchases and, if you choose it, account linking;
- Google AdMob, for ads (section 5).
We do not sell your data. Each provider is bound by a contract that complies with Article 28 of the GDPR. Any transfer outside the European Union is covered by appropriate safeguards (an adequacy decision or standard contractual clauses).
7. How long
- Your game: as long as you play. A player with no activity at all for three years has their data deleted.
- Proofs of purchase: ten years, the retention period for accounting records.
- Technical logs: twelve months.
- After a deletion: the host's backups still hold the deleted data for up to 90 days, until they rotate. They are only used to restore the service after an incident.
8. Deleting your data
In the game: Settings › Delete my data. Everything the game keeps about you is erased, on the device and on our servers. A connection is needed. Deleting your data does not refund your purchases, and a monthly pass is cancelled from the device's subscriptions.
If you no longer have the game, the steps are on thalunia.app/data-deletion.
9. Your rights
You have the right to access, rectify, erase, restrict, port and object, and to withdraw your consent at any time. Write to contact@thalunia.app; we answer within one month.
You may also lodge a complaint with the French data protection authority, the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr, or with the authority of the country where you live.
10. Children
Thalunia is meant for people aged 13 and over. We do not knowingly collect data from younger children. Where local law sets a higher age to consent to personalized ads (15 in France), that consent is given together with a parent or guardian.
11. Security
Exchanges between the game and our servers are encrypted (TLS). Access to data is limited to what is necessary. No system is infallible, and we cannot guarantee absolute security.
12. Changes
This policy may change, especially when the game adds a service. The date of the last update is at the top. A significant change will be announced in the game.
13. Contact
contact@thalunia.app