Your data, our responsibility
Privacy policy
How Creative AI Studio collects, uses, stores and protects your personal data when you use the Geo-Masters game and the geomasters.fr website.
Last updated: October 14, 2026
Data controller
Creative AI Studio, a French simplified joint-stock company (SAS) with a share capital of EUR 1,000.00, 61 Chemin de Crépieux, 69300 Caluire-et-Cuire, France, registered in Lyon under number 984 916 387. Contact: contact@creative-ai.studio.
1. Data we collect
The geomasters.fr website collects no personal data: it sets no cookies and has no forms and no audience measurement. The game, available at play.geomasters.fr, processes the following data:
- Account: email address and password, or Google account, handled by Firebase Authentication; account creation date and email verification status.
- Profile: username, the hometown you pick in the game, your statement that you are over 18, language and preferences (notifications, new player tour).
- Game data: card collection, level, experience, in-game currencies and their history, achievements, leaderboards, last day of activity.
- Interactions between players: friends and blocked players, private messages, guilds and their chat, card trades, market auctions, duels.
- Moderation: reports about messages or players, moderation decisions.
- Bug reports: the description you type, the game page, version, language, screen size and browser used.
- Push notifications, if you turn them on: the subscription address given by your browser.
- Payments, once the shop is open: Stripe customer and subscription IDs, purchases and Pro subscription status. You enter your card details with Stripe; they never reach us.
- Audience measurement, only with your consent: anonymous game events (pack opened, duel played and so on), with no email, username or player ID.
2. How we use your data, and legal bases
- Running the game (performance of the contract): creating and securing your account, keeping your collection and progress, running the social features (friends, messages, guilds, trades, market, duels, leaderboards).
- Communication (performance of the contract): account emails (address verification, password reset) and in-game notifications. We send no promotional email.
- Safety and player protection (legitimate interest): moderating messages and reports, preventing cheating and abuse. Free-text messaging is only open to players who state they are over 18; other players can only send predefined messages.
- Improving the game (legitimate interest): handling reported bugs.
- Payments (performance of the contract and accounting obligations): the shop and the Pro subscription, once open.
- Audience measurement (consent): understanding how the game is used, to improve it.
- Push notifications (consent given to your browser).
3. What other players see
Your username, level, card showcase and leaderboard positions are visible to other players. Your messages are read by their recipients (the player you write to, or your guild members). Your email address is never shown.
4. Sharing your data
We never sell or rent your data. It is only shared with the technical providers needed to run the service, who process it on our behalf:
- Cloudflare, Inc.: hosting of the website, the game and its game server.
- Google LLC: Firebase Authentication (sign-in), Cloud Firestore (account data) and, with your consent, Google Analytics for Firebase (audience measurement).
- Stripe: payments, once the shop is open.
- Browser notification services (Google, Mozilla, Apple, Microsoft), if you turn on push notifications.
Card images are loaded from Wikimedia Commons, which receives your device’s IP address as with any website. Your data may also be disclosed when the law requires it (legal or regulatory request) or, in the event of a sale or merger of our company, to the new owner.
5. Transfers outside the European Union
Cloudflare, Google and Stripe are US companies, so some data may be processed in the United States. These transfers are covered by the safeguards provided by the GDPR (the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses).
6. Cookies and local storage
The geomasters.fr website sets no cookies. The game stores on your device what it needs to work: your sign-in session, your preferences (theme, language, sound), your audience measurement choice and a cache of card images.
Audience measurement (Google Analytics for Firebase) is only loaded after you consent. Google advertising storage and advertising signals are turned off. Your choice, accept or refuse, is kept for 180 days and then asked again. You can change it at any time in the game’s Settings, which also deletes the measurement cookies.
7. Data security
We use appropriate technical and organizational measures to protect your data against unauthorized access, use or disclosure: encrypted connections, access rules that limit each player to their own data, game actions validated by our server, and access restricted to the people who need it to run the service.
8. Retention
- Account and game data are kept for as long as the account exists. Notifications are deleted after 30 days.
- When you delete your account, your profile, collection, history and relationships are erased. The text of your messages is removed from conversations and guilds, and reports are anonymized.
- Kept with no link to your email or username: bug reports, completed trades, auctions and duels, and purchases, which we must keep to meet our accounting obligations.
9. Your rights
Under Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act, you can:
- access your personal data;
- correct inaccurate or incomplete information;
- ask for your data to be deleted;
- ask for processing to be restricted, or object to it;
- ask for your data to be ported;
- withdraw your consent to audience measurement at any time;
- set instructions for what happens to your data after your death.
In the game’s Settings you can download your data and permanently delete your account. For any other request, write to contact@creative-ai.studio. If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).
10. Changes to this privacy policy
We may change this privacy policy at any time. When we do, we will publish the new version on this page and let you know in the game when needed. See also the legal notice.