Privacy — Rempara

In short: this website sets no cookies and has no advertising trackers and no forms. There is only one tracker, for audience measurement: a random identifier kept in your browser's local storage for 13 months at most (with a visit identifier erased when you close the tab), which you can refuse in one click. The tool is home-made, hosted on our own server, and never keeps your IP address (see "Audience measurement").

Who is responsible

The data controller is the publisher of this website, Briac Fromager (see the legal notice). Contact: briac@ik.me.

Person in charge of the protection of personal information (Québec Law 25): Briac Fromager, éditeur du site, reachable at the same address.

What data is processed

Server logs

Like any website, our host's server (Infomaniak Network SA) automatically records, for each visit: the IP address, the date and time, the page requested and the browser type. These logs are used only for security and to keep the website running (legitimate interest). They are kept for 14 days at most, then deleted. We do not use them for statistics or to identify you.

If you write to us

If you send us an email, we keep your message and address for as long as it takes to answer and follow up, then for 3 years at most after the last contact. They are never sold or shared.

Game saves

The games playable on this website save your progress (levels, stars, settings) in your browser's local storage. This data stays on your device and is never sent to us. It is strictly necessary for the game you started; you can delete it at any time in your browser settings (site data for rempara.com).

Links to YouTube and itch.io

We do not embed any player or button from these services: no data is sent to them until you click a link. Once on their website, their own privacy policy applies.

Rempara Android app

The Rempara app for Android collects no personal data: no account, no advertising, no audience measurement and no third-party service inside the app. Its only permission is Internet access.

Game saves stay on your phone (the app's local storage). They are deleted when you uninstall the app or clear its data.
New games: when your phone is online, the app downloads the list of games from rempara.com, and games released after your version of the app are loaded from rempara.com. Our server then records the usual logs described above (see "Server logs"), kept 14 days at most, never used to identify you.
Nothing is sold or shared with anyone.

Audience measurement

To know which pages and games people visit, and to fix what doesn't work well, we count visits with a home-made tool running on our own server. No third-party service (Google Analytics or any other) is used: the data never leaves our server.

What is recorded

Pages viewed (address without its parameters), time spent on the page, and clicks on "Play".
Where you came from: the name of the website that sent you here (e.g. youtube.com, not the full page address), and any campaign parameters (utm_*) from our own links.
Your country, worked out from your IP address with a database installed on our server. No region, no city.
Device type (mobile, tablet, computer), operating system, browser (without a precise version number), screen size and orientation, page language.
A random identifier, created in your browser's local storage (it is not a cookie), to count unique visitors. It contains nothing about you and is replaced with a new one after 13 months. A second identifier, cleared when you close the tab or after 30 minutes of inactivity, groups the pages of a single visit.
During a game on rempara.com: loading time, level started and reached, result (win, loss, quit), duration, score, display smoothness (frames per second) and the game's technical error messages.

What is never recorded

Your IP address: it is used for an instant, in memory, to find the country and block abuse, then forgotten.
Your name, email or any account: the website never asks for them.
The versions of our games on YouTube Playables and itch.io send none of this.

Retention, hosting and legal basis

Raw data is kept for 25 months at most, then deleted automatically; only totals (for example "120 games played this week") are kept longer. It is stored on our server, rented from Infomaniak Network SA in Switzerland, and only the publisher can access it, with a password.

This measurement is used only to produce visit statistics to run and improve the website. It follows the conditions set by the CNIL (the French data protection authority) for audience measurement tools exempt from consent (limited purpose, identifier lasting 13 months at most, retention of 25 months at most, right to object). Its legal basis is our legitimate interest in knowing the website's audience.

Opting out

You can opt out at any time, with no effect at all on the games. The choice applies to this browser, on this device:

You are counted on this device, without your name or IP address.

If your browser sends a Do Not Track or Global Privacy Control signal, nothing is sent, and our server rejects any data that would arrive with that signal anyway. Clearing the site data for rempara.com in your browser also deletes the random identifier (and your opt-out: remember to click again).

Country data: DB-IP (db-ip.com), licensed under CC BY 4.0.

Publishing our videos: TikTok and YouTube APIs

Rempara uses the TikTok Content Posting API (and the TikTok Login Kit) and the YouTube Data API for a single purpose: to publish our own promotional videos (trailers and clips of our games) on our own accounts on TikTok and YouTube.

No visitor data. These tools are used internally by the publisher. Visitors of this website and players of our games are not asked to sign in with TikTok or Google, and we collect nothing about them through these APIs.
What we access. Only the access tokens of our own TikTok and YouTube accounts, with the narrowest permissions needed to upload a video (for TikTok, basic profile information of our account and video upload; for YouTube, video upload). The tokens are kept as secrets in our private publishing environment, never on this website and never in a public place.
What we do not do. We do not read, store or resell data about other TikTok or YouTube users, we do not use these APIs for advertising or profiling, and we do not share any data obtained through them with third parties.
Revoking access. The access can be revoked at any time from the settings of our TikTok account (Security and permissions, Apps) and of our Google account (Security, Third-party access). For the YouTube API, the YouTube Terms of Service and the Google Privacy Policy also apply; for TikTok, the TikTok Terms of Service and Privacy Policy.

The page /oauth/tiktok/ of this website is the return address used when we authorize our own TikTok account. It shows a plain message, contains no script and stores nothing. Like any other page, a request to it appears in the server logs described above; the authorization code carried in the address is single-use, short-lived and useless without our private keys.

What we don't do

No cookies, no third-party analytics, no advertising pixels.
No audience data combined with other sources, shared or used for advertising. We do not follow you on other websites.
No selling or renting of data.
No profiling, no automated decisions about you.

Advertising

Advertising is disabled on this website. If it is ever enabled, this page will be updated first, and a banner will ask for your consent: nothing will load without it.

This website shows Google AdSense ads to keep its games free: banners on some pages.

Ad network: our advertising partner.
Cookies: third-party vendors, including Google, use cookies to serve ads based on a user’s prior visits to this website or other websites. Google’s use of advertising cookies enables it and its partners to serve ads to our visitors based on their visits to this site and/or other sites on the Internet. These cookies are set by Google, not by rempara.com; they last up to 13 months in the EEA and the UK, and up to 24 months elsewhere.
No personalized ads: many of our players are young, so we ask Google to treat all our ad requests as directed to children: no personalized ads and no remarketing. Cookies may still be used to limit how often an ad is shown, to count ads and to prevent fraud.
Personalization: where you allow it, or where the law of your country does not require consent, ads may be personalized based on your visits to this site and other sites.
Data collected by Google: cookie or device identifiers, IP address, browser and device type, the page viewed and your interactions with the ads (views, clicks). Purposes: showing and measuring ads, preventing fraud and abuse.
Your consent: in the European Economic Area, the UK and Switzerland, a message from Google (a consent management platform certified by Google, based on the IAB Transparency and Consent Framework) asks for your choice on your first visit. Refusing is as easy as accepting, and refusing never locks you out of a game. You can change your mind at any time with the “Cookie settings” link at the bottom of the pages.
Consent first: on your first visit, a banner asks for your choice. Nothing is loaded from the ad network before you click “Accept.” “Refuse” is as easy as “Accept,” and refusing never locks you out of a game.
Duration: your choice is kept for 6 months in your browser, then we ask again.
Changing your mind: at any time, with the “Cookie settings” link at the bottom of every page.
Opting out of personalized ads: at any time in Google’s Ads Settings; for other vendors, at aboutads.info or youronlinechoices.eu.
Partners: Google may work with other certified ad vendors; they are listed, with their purposes, in Google’s consent message (manage options, then vendors).
Transfers outside the European Union: Google may process this data in the United States and other countries, under the European Commission’s standard contractual clauses and the EU–US Data Privacy Framework.
Learn more: how Google uses information from sites that use its services and how Google uses cookies in advertising.

This page itself never shows ads.

Your rights

Under the GDPR (European Union) and Law 25 (Québec), you can ask to access, correct, delete or port your data, restrict or object to its processing, and withdraw your consent at any time. Write to briac@ik.me; we answer within one month at most.

You can also file a complaint with the CNIL (France) or the Commission d'accès à l'information (Québec).

Last updated: 2026-10-15