Privacy policy
Version of 15 October 2026 — Regulation (EU) 2016/679 (GDPR).
1. Controller
TicTocard Interactif, sole trader (French micro-entreprise), SIRET 990 289 902 00019 — contact@tictocard-interactif.com.
2. Data collected and purposes
| Data | Source | Purpose | Legal basis |
|---|---|---|---|
| E-mail, password (hashed), language | Sign-up | Account, sign-in, service e-mails | Contract (art. 6.1.b) |
| TikTok handle | Sign-up | Routing live actions to the right player | Contract |
| Google identifier (sub), Google e-mail | Google sign-in (optional) | Passwordless sign-in | Contract |
| FiveM licence identifier, player name, server connections | Game server | Game account link, access control, security | Contract, legitimate interest |
| Discord identifier | Discord link (optional) | Due-date reminders on Discord | Consent |
| Payment data | Stripe | Payment, invoices (not stored by the publisher) | Contract, legal obligation |
| Subscription history and invoices | Site, Stripe | Subscription management, accounting | Contract, legal obligation (10 years) |
| IP address, technical logs | Web server | Security, abuse limitation | Legitimate interest |
| News subscription | Optional box, unticked by default | Information e-mails | Consent (withdrawable at any time) |
No sensitive data is collected. No viewer username is stored by the site.
3. Recipients and processors
| Provider | Role | Location |
|---|---|---|
| Stripe Payments Europe Ltd / Stripe Inc. | Payments, invoices | Ireland / United States (standard contractual clauses) |
| Resend (Plus Five Five, Inc.) | Service e-mails | United States (standard contractual clauses) |
| Google LLC | Google sign-in, if you choose it | United States (Data Privacy Framework) |
| Discord Inc. | Reminders, if you link your Discord | United States (standard contractual clauses) |
| Hostinger International Ltd | Hosting of the site and game server | France (Paris data centre), European Union |
No data is sold or rented.
4. Retention
| Data | Duration |
|---|---|
| Account and links | Life of the account, then 3 years after last activity, or deletion on request |
| Invoices and accounting data | 10 years (legal obligation) |
| Technical logs (IP) | 12 months at most |
| FiveM link codes | 24 hours |
5. Your rights
Access, rectification, erasure, restriction, objection, portability, and withdrawal of consent at any time: from the account area (profile, account deletion) or by e-mail to contact@tictocard-interactif.com. Reply within one month. You may lodge a complaint with the CNIL (www.cnil.fr) or your local authority.
6. Cookies
The site only uses a strictly necessary session cookie (account sign-in), exempt from consent. No advertising or third-party analytics cookies.
7. Security
Encrypted connections (HTTPS), hashed passwords (scrypt), payments handled exclusively by Stripe, data access limited to the publisher, encrypted backups on the server.