Privacy Policy
Last updated: 12 September 2026
In two sentences. Café Fléchés asks for no account and sends no data to Enoxys: your grids, your progress and your settings stay on your device. The only possible collection is by the advertising network Google AdMob, and only if you choose yourself to watch a video in exchange for an extra hint — after giving your consent.
1. Who publishes the app
Café Fléchés (the "App" or the "Game") is developed and published by Enoxys ("we", "us"), acting as data controller within the meaning of the General Data Protection Regulation (GDPR).
Contact: contact@enoxys.fr
This policy describes the information processed when you use the App on an iPhone, an iPad or an Android device, what it is used for, and the choices available to you. It also covers this website, enoxys.fr/cafe-fleches, which contains no tracker and no analytics.
2. What the App does not do
In normal use, the App:
- requires no account, no e-mail address and no sign-up;
- includes no analytics, measurement or in-house profiling tool;
- displays no advertising of its own accord: no banners, no interstitials, nothing during a session;
- needs no connection in order to play — all 604 grids ship with the App;
- requests access neither to your contacts, nor your photos, nor your precise location, nor the microphone, nor the camera.
3. What is stored on your device
So that you find your grids exactly where you left them, the App writes a few pieces of information into its private storage area (the app sandbox) on your phone or tablet:
- the letters entered in each grid and how far along it is;
- time spent, number of hints used, grids completed;
- your statistics: current streak, best streak, average time per grid size;
- your settings: clue text size, contrast, theme, grid style, haptics;
- whether the Premium purchase has been made;
- your advertising consent choice, kept by Google's SDK so that you are not asked again every time.
This information is never sent to us and we have no access to it. It may be included in your device backup (iCloud or Google) depending on the backup settings you have chosen with Apple or Google.
To erase everything: uninstalling the App deletes all of this data. There is nothing else to request or delete anywhere else.
4. Rewarded advertising and consent
4.1 The principle: you decide
One free hint is granted per grid. If you ask for a second one without owning Premium, the App offers — and never imposes — to let you watch a short video advert in exchange for that hint. You may decline: the session carries on in exactly the same way. If the advert is unavailable (offline, failed to load), the hint is granted to you anyway.
These videos are served by Google AdMob (Google Ireland Limited for users in the European Economic Area).
4.2 Consent is requested beforehand, not at launch
The GDPR consent form (Google's UMP — User Messaging Platform) appears the first time you choose to watch a video, never when the App starts nor when a session begins. No ad request is sent before you have made that choice.
On iPhone and iPad, Apple's App Tracking Transparency prompt is presented immediately afterwards. Answering "Ask App Not to Track" has no consequence for the game: the hint is granted just the same, and any adverts are then non-personalised.
You can change your mind at any time from the App's privacy settings, as well as in your device settings (iOS: Settings → Privacy & Security → Tracking; Android: Settings → Google → Ads, where the advertising identifier can be reset or deleted).
4.3 The data involved
If — and only if — you agree to watch a video, Google AdMob may collect:
| Category | Data | Purpose |
|---|---|---|
| Identifiers | Device advertising identifier (IDFA on iOS, Google Advertising ID on Android) | Serving and measuring adverts |
| Usage data | Interactions with the advert: video shown, watched to the end, dismissed | Measurement and billing |
| Coarse location | Country or region, derived from the IP address | Compliance and broad geographic targeting |
| Diagnostics | Crash and performance data from the advertising SDK | Keeping the component working |
This data is collected by Google on its own behalf, as controller or joint controller depending on the case. On our side we receive only aggregated, anonymous statistics (number of videos watched, revenue). We never receive your advertising identifier.
Further reading: Google's privacy policy and how AdMob handles data.
4.4 Legal basis
The processing described above rests exclusively on your consent (Article 6(1)(a) GDPR, and Article 82 of the French Data Protection Act), collected through the UMP form. Without consent, no advert is loaded and no data is sent to the network.
Buying Premium removes this mechanism for good: no video is ever offered again, and no ad request is ever made.
5. The Premium purchase
Premium is a one-off, non-consumable purchase of €2.99 including tax. The transaction is handled entirely by Apple's App Store or by Google Play, depending on your device. We see neither your payment method, nor your name, nor your address: we receive only aggregated, anonymous sales data from the platform.
Processing of your payment data is therefore governed by Apple's or Google's privacy policy. Restoring the purchase on another device relies on your Apple or Google account, never on any database of ours.
6. Data sharing
We sell no personal data and pass none to any third party other than in the following cases, which are strictly necessary for the functionality described above:
- Google AdMob — only if you consent to watching a rewarded video (section 4);
- Apple and Google Play — solely for the Premium transaction and its restoration (section 5).
These providers may process data outside the European Union. Such transfers rely on the mechanisms set out in Chapter V of the GDPR (standard contractual clauses, adequacy decision for the EU–US Data Privacy Framework).
We may also be required to disclose information where the law compels us to.
7. Children and minors
The App is rated 4+ on the App Store and PEGI 3 / suitable for all on Google Play. It collects no data by itself and never asks for personal information.
Rewarded adverts, where enabled, are filtered to general-audience content. We nevertheless recommend that parents keep Premium, or a refusal of consent, in place for younger children, or use Apple's or Google's parental controls to disable in-app purchases.
8. Retention periods
- Local data (progress, statistics, settings): kept on your device until the App is uninstalled or its data cleared.
- Advertising data: retained by Google under its own retention rules, independently of us.
- E-mail exchanges with support: kept for as long as it takes to handle your request, and at most three years from the last contact.
9. Security
Local data is written to the App's private storage area, isolated from other applications by the operating system. The App exposes no network service and opens no connection other than those of the advertising SDK (once you have consented) and of the app stores. Traffic from those third-party components is encrypted in transit (HTTPS/TLS).
10. Your rights
The GDPR grants you rights of access, rectification, erasure, restriction, portability and objection regarding your personal data, as well as the right to withdraw your consent at any time.
- Local data: it is under your sole control. Uninstalling the App erases it entirely; we hold no copy of it and can therefore neither send it to you nor delete it on your behalf.
- Advertising consent: revocable at any time from the App's privacy settings or from your device settings (section 4.2).
- Data held by Google: requests concerning advertising data must be addressed to Google, which alone holds it. We will gladly help you word them.
For any question, or to exercise these rights: contact@enoxys.fr. We answer in French or English, within one month at the latest.
If you believe your rights are not being respected, you may lodge a complaint with the French data protection authority, the Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr, or with the supervisory authority of your own country of residence.
11. Changes to this policy
This policy may change, in particular if the App's features do. The date of the last update appears at the top of this page, and any substantial change will be published here before the corresponding version of the App is released, as well as in the privacy declarations of both app stores. No change will take effect retroactively.
12. Contact us
E-mail: contact@enoxys.fr
Website: https://enoxys.fr/cafe-fleches/en/
Café Fléchés is a French arrow-word game published by Enoxys.