Legal
Privacy policy
Redori Games runs a single account for all of its games. This page says everything the account hub keeps about you, and nothing else. Each game may keep data of its own, described on its own site.
Who is responsible
Redori Games, an independent studio run by Damien Duboeuf, is the data controller for redorigames.com. For anything on this page, write to:
What we keep
Only what the account needs in order to work. No profiling, no advertising, and no data sold or handed over for marketing.
- A nickname, an email address if you give one, your password as a hash if you set one, your language, your sound and music preferences, a link to the picture published by your provider, and the date the account was created.
- For every provider you link (email, Google, Discord, Facebook, X, Steam, Apple, Google Play) we keep its name, the identifier it gives us and the token it issued. Your password on those services never reaches us.
- For each Redori game: the first sign-in, the last one, and how many there were. No score, no progress, no play time.
- A game may ask us to keep a save for you. It is an opaque block of at most 256 kB that the hub stores and hands back without ever reading it: only the game that wrote it knows what is inside.
- Playing without an account writes no database row. A temporary session lives in memory for 24 hours and holds a nickname, a language and audio preferences — no email address, no IP address.
- To block password guessing in bursts, we count requests per IP address. Those counters expire after a few minutes at most, and your IP address is kept nowhere else.
- Two, and only when you ask: the link that confirms an address (valid 24 hours) and the link that resets a password (valid 1 hour). Never a newsletter.
No tracker
The site loads no audience measurement tool, no advertising tag and no third-party script. Fonts are served by the site itself. Nobody outside Redori Games watches you browse.
Two cookies, neither of which identifies you: rg_locale remembers your language for a year, rg_session holds the digit 1 and only tells a game that a session is open here, for thirty days. Your sign-in tokens stay in your own browser storage.
Finding your friends
If you link a Steam account, a game can ask which of your Steam friends also have a Redori account. We read that friend list at the moment you ask, compare it with our accounts, and answer with nicknames only. The list itself is never kept, and nothing is learned about the friends of yours who are not here.
You can refuse to be found: turn off « visible to your contacts » in your account, and you stop appearing in anyone's results.
Third parties
Signing in with Google, Discord, Facebook, X or Steam means talking to them: they learn that you signed in on redorigames.com, and their own policy applies. Emails leave through an SMTP provider, which sees the recipient address.
Those companies are established in the United States, so this step transfers data outside the European Union. Using them stays your choice — an email address and a password stay entirely with us.
For how long
Your account and everything attached to it stay for as long as the account exists. Guest sessions expire after 24 hours, abuse counters after a few minutes, confirmation and reset links after 24 hours and one hour. Expired sign-in tokens remain as hashes, never in readable form.
Your rights
The GDPR gives you the right to see your data, to correct it, to erase it, to receive a copy of it and to object to its use. Write to the address above and we answer within one month.
If our answer does not satisfy you, you may complain to your data protection authority — the CNIL in France.
Deleting your data
There is no delete button in your account page yet: we do it by hand, and we would rather say so than announce a screen that does not exist.
Send us an email with the subject « Delete my account », from the address linked to your account. If your account has no address, give us your nickname and the provider you sign in with, so that we can identify it.
We then erase the account, its sign-in methods, its game history and its saves, within one month. Deletion is final: the games recognise you through that account, so whatever they kept for it is lost.
If you only want to unlink one provider, your account page does that on its own, as long as one sign-in method is left.
Changes
This page changes along with the site. The date at the top is the date of the last change.