Privacy policy

Who we are

RUMIVO ("we", "the service") is published by an individual. For any question about your personal data, reach us at contact@rumivo.app.

This policy applies to the whole rumivo.app site: it describes what data we process, why, for how long, and how to exercise your rights.

The data we collect

We only collect what's strictly necessary to run the game.

• Google ID, email, name and avatar — at sign-in, to create and display your account.
• Your votes and predictions — to run the game and compute your score.
• An anonymous identifier (rumivo_aid cookie) — set only on your first vote, never on a simple visit.
• Your IP address — kept for 30 days in our technical logs, for security and fraud prevention.
• Your preferred language.

What we don't do

No advertising trackers. No selling or sharing your data for commercial purposes. No precise geolocation. No behavioral profiling. No invasive analytics.

Why we process this data

• Performance of the contract formed when you use RUMIVO — account, votes, predictions, score, language.
• Legitimate interest — service security and prevention of fraud or vote stuffing (rumivo_aid cookie, IP logs).

How long we keep it

• Account profile — for the lifetime of the account.
• Votes and predictions — kept permanently, but anonymized if you delete your account (see below).
• rumivo_aid cookie — 400 days, the maximum browsers allow.
• IP address — 30 days in technical logs.

Cookies

RUMIVO uses three cookies, all strictly necessary or functional — no advertising or analytics cookie. That's why you don't see a blocking consent banner: nothing stands between your arrival and today's question.

• __Host-rumivo_session — an opaque session identifier once signed in, carrying no readable information.
• rumivo_aid — an anonymous identifier, set on your first vote, to stop the same visitor voting more than once.
• rumivo_locale — remembers your chosen language.

Who we share your data with

Google, solely for sign-in (OAuth). Once you're signed in, we never call any Google API again and never send it any further data.

Our host, located in the European Union, which runs our servers and databases.

We never sell or share your data with any other third party for commercial purposes.

Data location and transfers

Your data is hosted within the European Union. Only signing in with Google involves a technical exchange with Google's servers, which may be located outside the EU; that transfer is governed by Google's standard contractual clauses.

Your rights

Under the GDPR, you have the following rights over your data:

• Access and portability — download all of your data (profile, votes, predictions, scores, archive guesses) as JSON from your profile, once a day.
• Rectification — your name and avatar come from your Google account; fix them there and they'll update on your next sign-in.
• Erasure — delete your account from your profile (the next section explains exactly what that changes).
• Objection — deleting your account counts as an objection to further processing of your personal data.
• Complaint — you can contact the CNIL (cnil.fr), or your own country's data protection authority.

What actually happens when you delete your account

Your profile (name, email, avatar, Google ID) is anonymized immediately and irreversibly. You're signed out on every device, removed from every leaderboard, and your personal stats are deleted.

Your past votes and predictions, however, are not deleted — they're detached from your identity instead. Here's why: once aggregated and published, a daily result becomes a global statistic that millions of people have seen. Changing it would mean rewriting an already-revealed result, with no benefit to you since you're no longer identifiable in it once your account is anonymized. That trade-off — anonymizing rather than deleting — protects your personal data without breaking the game's integrity.

Security

We never expose a login token to your browser: authentication relies on an opaque session identifier, stored server-side and protected (a secure cookie, unreadable from JavaScript). Traffic to our servers is encrypted. Access to your data is limited to what's strictly necessary to run the game.

Minimum age

RUMIVO is available to people aged 13 and over (16 in jurisdictions that require it). By using the service, you confirm you meet that requirement.

Changes to this policy

We may update this policy to reflect changes to the service or the law. The last-updated date is shown at the top of this page; any material change will be flagged clearly on the service.

Contact us

For any question about this policy, or to exercise your rights: contact@rumivo.app.