Privacy Policy

The controller of your personal data is Aurélien Faÿ, who can be contacted at contact@godart.app.

Data protection contact: GoDart - contact@godart.app.

This policy applies to data processed when using the website and application GoDart.

Depending on the features you use, we may process the following categories:

• identification data (email, account identifier),
• profile data (first name, last name, nickname, avatar, information provided voluntarily): other users only see the initial of your last name,
• date of birth (required) and gender (optional): they are never shown to other users; only your age appears on your player profile,
• contribution data (reviews, favourites, venue suggestions),
• technical data (logs, device, session, security),
• notification data (your phone’s notification token and the notifications you choose to receive, adjustable by type from your profile in the app),
• contact data (support correspondence), business and billing data, and browsing statistics when you consent to them on the website.

The service is reserved for people aged 15 and over.

Data is accessible only to authorised people, including:

• internal teams responsible for product, support and security,
• technical processors strictly necessary to provide the service.

• Supabase (authentication, database, storage),
• Web hosting provider (see Legal notice),
• Cloudflare (content delivery and protection of the website; it gives the website the approximate country, region, city and location of each visitor’s IP address),
• Stripe for web payments and subscriptions when you use those services,
• Email provider for contact requests and service emails,
• Google Places for venue information and photos,
• For in-app purchases: Apple or Google, and RevenueCat for managing subscription entitlements.

When data is transferred outside the EU/EEA, we implement appropriate GDPR safeguards, including European Commission standard contractual clauses or an adequacy decision.

You can request information about the countries where data is processed and a copy of the applicable safeguards by writing to contact@godart.app.

• Account data: while the account is active, followed by limited intermediate archiving to meet legal obligations and handle disputes.
• Support data: 3 years from the last contact.
• Community notifications (games, home bar, contributions, birthday): 30 days after sending. The notification token is deleted as soon as you turn notifications off or sign out.
• Bar check-ins (“I’m at the bar”, in the app or with the bar’s QR code): 90 days. The bar manager only sees totals (number of players, days and hours), never your identity.
• Technical security logs: 12 months, unless otherwise required by law.
• Listing audience measurement (with your consent): the details (visitor identifier, device, operating system, browser, estimated location, signed in or not) are deleted 25 months after the view; only totals without these details remain. The “godart-visiteur” cookie expires 13 months after it is created and is not extended by your visits.
• Location for sorting by distance: 7 days in your browser (“godart-position” cookie); the location derived from the IP address is not stored.
• Data relating to legal obligations: retained for the periods required by applicable regulations.

Under the GDPR and the French Data Protection Act, you have rights including access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw consent where processing is based on consent.

You can exercise your rights by contacting: contact@godart.app. Proof of identity may be requested if there is reasonable doubt.

Your date of birth can be corrected once in the app; for any further correction, write to the address above. You can remove your gender at any time in the app.

We normally respond within one month. If the complexity or number of requests requires an extension, we will inform you within that period, explaining why. The extension cannot exceed two additional months.

If a disagreement persists, you can lodge a complaint with theCNIL.

The website uses your browser’s local storage and a few cookies. Operations needed for the service you request are separate from the optional audience measurement, which is only enabled with your consent. The table below lists them all; details follow.

• Sign-in: the “godart-web-auth” key stores your session so you can access your account. It is removed when you sign out; you can also delete the website’s data in your browser.
• Tournaments: names or nicknames, teams, settings and scores entered by the venue are stored by GoDart to save the tournament and show it on the venue’s screen and on spectators’ phones (link or QR code, not indexed). A copy stays in the venue’s browser. The tournament is replaced when the next one starts and deleted after 6 months without changes. Use nicknames on public screens where possible.
• Directory city and filters: the “godart-annuaire” cookie remembers the last place (city or area) and the filters you chose in the directory, so they are shown again when you come back, as well as your choice not to be located automatically. It contains no location, identifier or search text, is only sent to the GoDart website and expires after 180 days. The directory's “Forget” and “Clear all” buttons delete it.
• Near me and sorting by distance: when you use this button, or if you have already allowed GoDart to use your location in your browser, your location rounded to about 1 km is sent to our server to find the nearest city, and kept for 7 days in the “godart-position” cookie to sort bars from nearest to farthest and show their distance. It is neither recorded nor logged on our servers. The directory’s “Forget” button deletes it; you can also withdraw location permission in your browser.
• Approximate location without location sharing: if you have not shared your location, the directory may sort bars from the approximate location of your IP address (usually at city level), provided by Cloudflare. It is only used to display the requested page and is not stored; no distance is shown in that case.
• A bar’s QR code: the “godart-qr-scan” key remembers when you last scanned a bar’s QR code, so that only one scan per hour is counted. The scan is counted without any visitor identifier.
• Your choice: the “godart-web-privacy-v1” key stores your acceptance or refusal for 180 days, after which you are asked again. If storage is blocked, your choice lasts only for the current page.
• Optional audience measurement: nothing is measured before you consent. Once you accept, when you view a bar’s listing or click its buttons (directions, phone, website, social networks, app), the GoDart website records with Supabase:
  • the bar, the type of action, the date and a traffic source category (search, AI assistant, direct access, external link, campaign or internal navigation);
  • a hash of a random identifier kept for 13 months in the “godart-visiteur” cookie, to count unique visitors and tell new visitors from returning ones;
  • whether you are signed in to a GoDart account or not (never which one);
  • the device type (phone, tablet, computer), the operating system family and browser or app (for example iOS and Safari, Android and Instagram), without version numbers;
  • the country, region and city estimated by Cloudflare from your IP address. The IP address itself is not recorded: only a temporary hash is used to limit abuse, then deleted.
  No search terms or full referring URLs are attached. This information is only used to produce statistics: GoDart sees totals for the website, and a bar’s manager sees those for their listing (number of visitors, share of returning visitors, devices, cities…), never a visitor’s identity or browsing path. Details are deleted after 25 months. Refusing or withdrawing your consent deletes the “godart-visiteur” cookie and stops all measurement. Network requests may nevertheless generate technical logs at our providers.
• Searches with no results: when a directory search returns no venue, its text is counted without any identifier or referrer, so we know which cities or bars to add. It is deleted 13 months after it was last searched. Please avoid typing personal information there.
• Campaign links: if you arrive through a GoDart link containing a campaign code (“ref” parameter), the code stays in memory while you browse, with no cookie or storage, and is only attached to the venue listing request you send.

You can accept, refuse or withdraw consent using the “My privacy choices” button at the top of this page. Refusing or withdrawing consent does not restrict functionality. Withdrawal stops future transmissions; it does not affect processing carried out before withdrawal. The website does not include an advertising tracker.

External pages you choose to open, including Stripe payment pages, apply their own privacy information and choices.

We implement appropriate technical and organisational measures to protect data against unauthorised access, loss, alteration or disclosure.

This policy may change to reflect legal, technical or functional developments. The applicable version is the one published on this page.

For any questions about data privacy: contact@godart.app (you may copy contact@godart.app).