Information
Privacy Policy
Last updated: October 2026. This policy describes how BS Studio, publisher of Athena Adventure, processes your personal data in line with the GDPR.
Data controller
BS Studio, a sole proprietorship (micro-entrepreneur), SIREN 848 574 067, 2 rue des sources, La Chapelle-Largeau, 79700 Mauléon, France. Personal data contact: dpo@bs-studio.fr (or contact@bs-studio.fr). This address is a dedicated contact point and is not the appointment of a data protection officer.
Data collected
- Contact: name, email address, message content;
- Orders: name, email address, billing and delivery addresses, game username and account ID, order history; payment data is processed by the payment provider;
- Game server: username, account ID, connection IP address, gameplay data needed for operation and moderation;
- Technical data: IP address, pages viewed, session information.
- Gameplay statistics: on the server, blocks mined, rare resources obtained and held, play time, linked to the account ID to spot cheating and item duplication; only totals without any identifier are published;
- Visits and downloads: daily counters (page view, click on a tracked button, launcher download), with no cookie, no IP address stored and no identifier;
- Launcher (optional, off by default, to be accepted in the launcher): a random installation ID you can reset, launcher and pack versions, install and launch events, error codes, and a hardware profile: operating system and version, processor and graphics card model, core count, memory and video memory, screen resolution. Never a username, UUID, IP address or serial number;
- Accounts and site services: data needed to run the site\'s services (identifiers, updates, internal API), stored in the site\'s database;
Purposes and legal bases
- Answering a contact request: legitimate interest (art. 6.1.f);
- Processing an order and providing the service: performance of a contract (art. 6.1.b);
- Invoicing and accounting: legal obligation (art. 6.1.c);
- Site and server security, moderation, abuse prevention: legitimate interest (art. 6.1.f);
- Audience and performance measurement: legitimate interest or consent depending on configuration;
- Server statistics and modpack improvement (visits, downloads, player hardware): consent for the launcher (art. 6.1.a), legitimate interest for counters without an identifier;
- Handling complaints and disputes: legitimate interest (art. 6.1.f).
No marketing is carried out using this data, and no data is sold, rented or passed on to third parties.
Recipients and processors
Your data is processed by BS Studio and, on its behalf, by technical providers: the site host (Cloudflare), the payment provider (PayPal or another indicated at purchase), the email delivery service, the analytics tool, manufacturing and logistics providers for physical products, and where relevant an accountant or lawyer. No other sharing takes place, except where required by law.
Transfers outside the European Union
The site's server functions run in the European Union (Cloudflare Workers) and data is stored in a Cloudflare database located in the European Union. As Cloudflare, Inc. is a US-law company, some processing (support, delivery network, monitoring) may nevertheless involve transfers outside the European Union, as may some other providers. These transfers are covered by GDPR safeguards (adequacy decision, standard contractual clauses or equivalent), details of which are available on request.
Audience measurement
The site counts its visits with a cookie-free counter: one line per day and per page, no IP address, no identifier and no cross-site tracking; it does not run if your browser sends the Global Privacy Control signal. It also uses Cloudflare Web Analytics. In the current configuration, no cookie is set on your browser. See the cookie policy.
Your rights
You have the rights of access (art. 15), rectification (16), erasure (17), restriction (18), portability (20) and objection (21), and the right to withdraw consent at any time. Write to dpo@bs-studio.fr; proof of identity may be requested if in doubt. We answer within one month, extendable by two months for complex requests. You may lodge a complaint with the CNIL: cnil.fr/fr/plaintes.
Retention periods
- Contact requests with no follow-up: up to 3 years after the last exchange;
- Order and game account data: duration of the relationship, then archived to defend legal rights (5-year limitation period, art. 2224 of the French Civil Code);
- Invoices and accounting records: 10 years (art. L.123-22 of the French Commercial Code);
- Host request logs (Cloudflare): 7 days at most;
- Server sanctions (UUID, username, reason, date, decision maker): 12 months from the date, then deleted;
- Launcher usage statistics and hardware profile (optional, off by default): 90 days;
- Gameplay statistics linked to an account (blocks mined, resources): 90 days, then deleted; daily totals without an identifier are kept from one season to the next;
- Visit and download counters (no identifier): kept from one season to the next;
- Analytics data: depending on the tool, up to 25 months.
Security
Exchanges are encrypted (HTTPS/TLS), and technical and organisational measures protect your data against loss, destruction or unauthorised access.
Changes
This policy may be updated. Questions: contact@bs-studio.fr.