Privacy policy
Last updated: October 22, 2026
This translation is provided for your convenience: only the French version is legally binding.
Data controller
The website publisher — contact: support@dofusfangames.com. We collect only what is strictly necessary and never sell any data.
Data collected, purposes and retention
| Data | Why | Legal basis | Retention |
|---|---|---|---|
| Username, e-mail, password (stored encrypted, irreversible) | Create and manage your account, confirm your address, send you service e-mails | Contract | Until the account is deleted |
| Page content (texts, links, images) | Display your projects | Contract | Until the page or the account is deleted |
| Irreversible fingerprint of the IP address (salted hash) when voting or reporting | Limit votes to one per project and per period, fight abuse and fraud | Legitimate interest | Anonymized after 30 days; the IP address is never stored in clear |
| Date you accepted the terms | Proof of consent | Legal obligation / legitimate interest | Duration of the account |
| Amount, duration and project of a promotion purchase | Provide the service and meet our accounting obligations | Contract, legal obligation | 10 years (accounting) |
| Server technical logs (IP address, date, requested page) | Security, diagnostics, the host’s legal obligation | Legitimate interest / legal obligation | Time needed for security, within legal limits |
Cookies and trackers
The site sets two cookies, strictly necessary for it to work: “dfg_session” (logging in to your account, 30 days maximum) and “NEXT_LOCALE” (remembering your chosen language, 1 year). There are no advertising or tracking cookies; no consent banner is therefore required. The anti-bot test (Cloudflare Turnstile), shown before a vote or a report, is used for security purposes only.
Votes and automated processing
Automated systems (vote limit based on an IP address fingerprint, anti-bot test) detect multiple or automated votes and may invalidate a vote. They have no significant legal effect on you within the meaning of Article 22 GDPR; to contest, contact us through the contact page.
Recipients and processors
- o2switch (France): hosting of the site and the database.
- Stripe: payment for promotions (the site never sees your card data).
- Cloudflare (Turnstile): anti-bot verification when voting and reporting.
- Resend: sending service e-mails (address confirmation, forgotten password).
- Discord: newly published pages (name, description, tags, images) and monthly top 10s are announced on the site’s Discord server; these announcements contain neither your e-mail nor your password.
Some of these providers may process data outside the European Union, under recognized safeguards (standard contractual clauses or the EU–US data protection framework).
We do not sell or rent any personal data. Your data is only disclosed to administrative or judicial authorities when the law requires it.
Your rights
You can access your data, correct it, delete it, object to a processing, and request its restriction or portability. Most of these actions can be done directly in your profile(editing, deleting your account and projects). For any other request: support@dofusfangames.com. We reply within one month. If you believe your rights are not being respected, you can lodge a complaint with the CPDP (Commission for Personal Data Protection, Bulgaria) or with the data protection authority of your country.
You may also withdraw any consent you have given at any time and set directives on what happens to your data after your death. ID may be requested if there is reasonable doubt about the requester’s identity.
Security
Encrypted passwords, secure connections (HTTPS), restricted database access, irreversible fingerprints instead of IP addresses, images verified and re-encoded on upload.
Minors
Accounts are reserved for people aged 15 or over, or with a parent’s consent.
Sensitive data
Please do not post sensitive data (origin, opinions, health…) in free-text fields.
Changes to this policy
This policy may change; the update date is shown at the top of the page and affected users are notified by e-mail if the use of their data changes significantly. It is governed by Bulgarian law, without prejudice to the protective provisions applicable to EU consumers.