1. Controller
Grégoire Bigot, a French sole trader operating under the registered trade name Blitzforge, SIREN 824 389 860.
Address: 8 rue du Saint-Gothard, 75014 Paris, France.
3. Data collected
- Account: email, username and information needed for authentication.
- Profile: first name, last name, city, country, birthday, gender, photo, bio.
- Guest sessions: technical information needed to secure and resume a session.
- Authentication and session: information needed to keep the account signed in and secure.
- Games: positions, moves, results, rating, accuracy and game history.
- Chat: messages, rooms, reactions and members.
- Notifications: type, message and metadata.
- Social: friends, followers and likes.
- Moderation: reports, evidence limited to useful context, decisions, sanctions and information needed for their follow-up.
- Progression: Elo, quests, badges, rewards and inventory.
- Analysis and coach: move quality, probabilities and coach messages.
- Premium payments: subscription, purchases, status, dates, billing address entered with Stripe and technical transaction identifiers.
- Web Stripe contract evidence: terms version, withdrawal-policy version and immediate-performance request.
- Web Stripe withdrawal: declared identity, account and receipt emails, plan, purchase date, optional reference, status and acknowledgement receipt.
- Transactional emails: recipient address, subject, acknowledgement content and technical information needed for delivery.
- Media: images sent through upload-image and publicly exposed through S3 URLs when the product publishes them.
4. Why this data is used
- Create and secure accounts and sessions.
- Enable online play, campaign mode, game history and game recovery.
- Provide move analysis, accuracy, progression and coach feedback.
- Manage puzzles, quests, badges, rewards and inventory.
- Enable chat, notifications, profiles and social interactions.
- Manage purchases, subscriptions, restores and premium rights.
- Record, acknowledge, review and process Web Stripe withdrawal declarations.
- Handle support, security, moderation and abuse prevention.
5. Purposes and legal bases
- Contract performance: account, authentication, games, requested social features, progression, Premium, purchases, restores, support, withdrawal and account deletion.
- Legitimate interests: service security, fraud and cheating prevention, technical diagnosis, defense of legal rights, moderation and improvements strictly necessary for operation.
- Legal obligation: keeping accounting records and handling requests from authorities or people exercising their rights.
- Consent: non-essential trackers or optional processing where this basis is required. No non-essential advertising or analytics tracker is enabled in the audited version.
6. Game and analysis data
BlitzForge processes positions, moves, PGN, FEN, results, Elo, accuracy, move quality, probabilities and coach messages to enable play, review and progression.
These features must not be described as professional or official coaching.
7. Chat, social and notifications
Messages, rooms, reactions, members, friends, followers, likes and notifications may be processed to provide social features, inform users and support moderation.
8. Reports and moderation
When content or an account is reported, BlitzForge keeps only the information useful for understanding the situation, reviewing the case and recording the decisions made.
The identity of the person who submits a report is not shared with the reported person. Internal notes and staff identities are not shown in sanction messages.
After account deletion, moderation references are reduced or replaced to preserve a useful history without recreating the deleted profile.
9. Payments and premium
Premium subscriptions purchased on the web are paid for and managed with Stripe. On iOS, in-app purchases are paid for and managed by the App Store, with RevenueCat synchronizing their status.
Stripe collects the billing address required in its hosted form. BlitzForge keeps the information needed to determine subscription status and grant or remove Premium access; BlitzForge does not collect payment card numbers, and they must never be sent to support.
For a Web Stripe subscription, BlitzForge stores with the subscription the terms version, withdrawal-policy version and evidence that immediate performance was requested. This request is not a waiver of the withdrawal right.
A Web Stripe withdrawal declaration is recorded with an opaque reference to acknowledge it, verify the relevant contract, apply the decision and retain minimized evidence.
10. Cookies and local storage
BlitzForge may use strictly necessary cookies, localStorage/sessionStorage, JWT or equivalent storage for authentication, session and language preference.
If non-essential analytics or marketing trackers are added, a consent decision and a dedicated component must be added.
11. Recipients and service providers
- Authorized Blitzforge personnel, only for operations, support, security, moderation and administration.
- OVHcloud for production infrastructure; MongoDB and Redis are operated within that infrastructure and are not separate third-party cloud services in the audited deployment.
- Amazon Web Services S3 for profile images uploaded by the user and published by URL when displayed by the product.
- Clerk for authentication and account management, including Google or Apple sign-in selected by the user.
- Stripe for Web payments and subscription management.
- Apple and RevenueCat for in-app purchases, restore and subscription status on iOS.
- Google, through Gmail SMTP, to send transactional acknowledgements and operator alerts for Web withdrawal requests, and for certain support correspondence.
- Centre de la Médiation de la Consommation de Conciliateurs de justice (CM2C) when a consumer refers a dispute: the consumer submits the request directly, and BlitzForge discloses only information needed to handle that dispute.
- Authorities, advisers or courts when required by law or to establish, exercise or defend a legal claim.
12. International transfers
Some providers, including Clerk, Stripe, RevenueCat, Apple and Amazon Web Services, may process data from countries outside the European Economic Area. In that case, the transfer must rely on a mechanism recognized under the GDPR, such as an adequacy decision or standard contractual clauses, and the safeguards published by the relevant provider.
13. Retention periods
- Account, profile, active sessions, progression, content, social relationships and personal game data: while the account is used, then deletion or anonymization as described below.
- Shared multiplayer games: result and moves are retained with the identity replaced by “Deleted user” after account deletion.
- Chat messages, owned media, sessions, notifications and progression data: deleted during account deletion within the implemented technical scope.
- Completed technical deletion operation: minimized information retained for 90 days, then automatically deleted.
- Pseudonymized security marker for a temporary suspension: until the measure ends or is lifted; for a permanent restriction: until it is lifted.
- Minimized payment evidence and accounting records: for the period required by accounting and tax obligations and dispute handling.
- Support requests, reports, moderation decisions and technical logs: for the period necessary for handling, security, evidence and applicable review periods, with access limitation and minimization.
- Withdrawal requests and acknowledgement receipts: for the period necessary for processing, contract evidence, financial obligations and applicable disputes, followed by minimization of data that is no longer needed.
- Clerk, Stripe, RevenueCat, Apple and Amazon Web Services also apply their own retention policies and legal obligations.
14. Security
BlitzForge aims to use HTTPS, hashes for certain tokens or technical identifiers, JWT authentication and access controls. No page should promise zero vulnerabilities.
15. Your rights and the CNIL
You may request access, correction, erasure, restriction or portability of your data, and object to processing based on legitimate interests. You may withdraw consent at any time for future processing by emailing privacy@blitzforge.io. Proportionate identity verification may be requested.
You may also lodge a complaint with the French data protection authority, the Commission nationale de l’informatique et des libertés (CNIL), including through cnil.fr.
16. Account deletion
Deletion starts in the app under Settings, Account, then Delete my account. After confirmation, sign-out is immediate and deletion is processed automatically.
The profile, sessions, progression, affected personal content and Premium access linked to the account are removed. Previously played multiplayer games may remain in history with “Deleted user” replacing the deleted identity.
Some minimal or anonymized information may be retained where needed for game integrity, accounting obligations, fraud prevention or security.
If a suspension or permanent restriction is still active, BlitzForge may keep a protected security reference so that deleting and recreating the account cannot bypass the measure. It does not contain the email address in readable form and is removed when the temporary measure ends or the restriction is lifted.
17. Minors
BlitzForge is not presented as a service specifically directed at children. Where parental authorization is required by applicable law, the legal guardian must assist with account creation and use.
19. Last updated
2026-08-23.
