Data and purposes
Cymahunt processes the data required to create and operate the player account: identity returned by Google OAuth (name, email address, identifier), language preferences, login history, and technical logs (truncated IP address, session identifiers, timestamps). Approximate geolocation data is collected during detection rituals to power the gameplay mechanics. Audience measurement relies on Matomo configured under the CNIL exemption regime: anonymised IP addresses, no cookies, and no advertising. Processing is based on contract performance (account management, gameplay), legitimate interest (security, anti-fraud), or consent when required. Data is retained for the duration of the active account, security logs for up to 13 months, and aggregated statistics for up to 25 months.