Privacy and cookies policy

This policy explains how Unfriendly Games collects, uses and protects your personal data when you visit the unfriendly-games.com website or place an order, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (Informatique et Libertés).

Data controller: Unfriendly Games S.A.S., a company with share capital of €3,000, SIREN 888 835 915, whose registered office is located at 36 rue des Sarments, 95490 Vauréal.

Contact for any question about your data: [email protected]

Last updated: October 8, 2026.

We only collect the data needed to process your order and to run the site. Orders are placed without creating a customer account.

• Identity and contact details: last name, first name, email address and phone number.
• Delivery and billing: addresses, the chosen delivery method and, where applicable, the selected pickup point.
• Order: items ordered, amounts, date and status of the order.
• Payment: it is processed directly by our payment provider (Stripe via WooPayments, or PayPal). We neither see nor keep your credit card number; we only receive the confirmation of the payment and its references.
• Messages: content of the messages sent via the contact form or the after-sales service, including the order number concerned.
• Technical and security data: IP address, browser type, date and time of requests, security logs, as well as the cookies described in the “Cookies and other trackers” section.

Each processing activity relies on one of the following legal bases:

• Order management, payment, delivery and after-sales service: performance of the contract concluded with you (Article 6.1.b of the GDPR).
• Invoicing and accounting: legal obligation (Article 6.1.c).
• Site security and fraud prevention: legitimate interest of Unfriendly Games (Article 6.1.f).
• Replying to your contact messages: legitimate interest in replying to the requests addressed to us (Article 6.1.f), or performance of the contract when the message concerns an order.
• Audience measurement (Google Analytics, if enabled) and playback of YouTube videos: your consent (Article 6.1.a), which you can withdraw at any time.

Your data is never sold. It is accessible only to authorised persons at Unfriendly Games and, within the limits of their duties, to the following providers:

• Hostinger: hosting of the site and the shop (WooCommerce).
• Stripe (via WooPayments) and PayPal: online payment and fraud prevention.
• La Poste / Colissimo: delivery, including the search for pickup points.
• Brevo: sending of the emails generated by the contact form.
• WooCommerce: order management and order confirmation emails.
• Cloudflare (R2): storage and delivery of the site's images and files.
• IGN – Géoplateforme: base maps for pickup point selection (your IP address is transmitted to the IGN, without any cookie).
• Google (YouTube, and Google Analytics if enabled): only after your consent.

Transfers outside the European Union. Some providers (Stripe, PayPal, Google, Cloudflare) may process data outside the European Union, notably in the United States. These transfers are covered by the adequacy decision of the Data Privacy Framework or by the standard contractual clauses of the European Commission.

Retention periods:

• Order and billing data: 10 years (accounting obligations).
• Contact and after-sales messages: 3 years from the last exchange.
• Technical and security logs: 12 months.
• Cookies: duration indicated in the table of the “Cookies and other trackers” section.

In accordance with the GDPR, you have the following rights over your data:

• access to your data and a copy of it;
• rectification of inaccurate data;
• erasure of your data, within the limits of our legal retention obligations;
• objection to processing based on our legitimate interest;
• restriction of processing;
• portability of the data you have provided to us;
• withdrawal of your consent at any time, without affecting prior processing.

To exercise these rights, write to us at [email protected]. We reply within one month; if there is any doubt about your identity, we may ask for proof of identity.

If, after contacting us, you believe your rights are not being respected, you may lodge a complaint with the CNIL (Commission nationale de l’informatique et des libertés): cnil.fr/fr/plaintes.

A cookie is a small file saved on your device when you visit a site. This site uses two families of trackers:

• Strictly necessary cookies: language, cart, security, payment and memorisation of your choice. They are exempt from consent; we describe them here for information.
• Cookies subject to your consent: Google Analytics audience measurement (if enabled) and playback of YouTube videos. They are only set after your agreement.

No advertising or profiling cookie is set, and no non-exempt audience measurement is enabled without your prior consent.

You can change or withdraw your choice at any time with the “Manage my cookies” button at the bottom of every page. Your choice is kept for 6 months, after which we ask you again.

The site may use Google Analytics, an audience measurement service from Google Ireland Limited, to understand how pages are viewed (page views, journeys, origin) and to improve the site.

This tool is only loaded after your consent: without your agreement, no request is sent to Google. It sets cookies lasting 13 months; the measurement data is kept for 14 months at most and may be processed by Google in the United States, within the framework described above.

You can withdraw your consent at any time with “Manage my cookies”: collection stops and the audience measurement cookies are deleted.

We use Google Search Console, on the site's administration side, to monitor the indexing of our pages and our visibility in Google search results. Used on its own, this tool sets no cookie on visitors' devices and therefore does not require a consent banner.

If we ever add another non-essential tracker (for example Google Ads, Google Tag Manager for marketing purposes, reCAPTCHA or Google Maps), we will update this policy and the consent banner before it is enabled.