Your data, explained simply

Who is responsible for your data?

For any question about the processing described here or to exercise your rights, contact Studio Cachette using the details below.

Brand

Studio Cachette

Customer contact

contact@studiocachette.fr

Names in previews, books and certificates

You can enter a first name or nickname, or choose a blank certificate. During previews, names and encouragement stay in page memory; reloading clears them. Just before you leave for PayPal, a copy linked to your order is placed in this tab’s session storage to restore your choices on return, including after interrupting and resuming payment. It can be reused for 3 hours, then is removed the next time that order is accessed. It is not sent to PayPal or our server, or added to the URL. Clear the names on your order removes this copy. For adventure certificates, corrections after payment stay in memory and remove the old copy. For a book, the checked name is kept in this tab for 3 hours each time the PDF is generated. Clearing the name deletes this copy; no name is saved in permanent local storage.

After confirmed payment, names entered for a certificate or personalised book are sent temporarily to our server when creating the PDF. They are used only for that generation and are not retained in the database, order or application logs. They are not sent to PayPal or placed in the URL or file name. The download is private and is not cached. After downloading, names remain in the PDF saved on your device. For a game, the order contains the selected certificate count, from 0 to 8, without the names. For a book, it contains the selected theme, format, fictional character, power and strength, without the name. To restore the name after PayPal, this tab may keep it in session storage for 3 hours; otherwise, enter it again when downloading. No child-photo service, facial recognition or voice cloning is offered here.

Your selection and necessary access

Selected adventure IDs are kept in your browser’s local storage so your selection remains when you move between pages. The certificate quantity is kept in the tab’s session storage to preserve it after a reload. The temporary copy of names made when leaving for PayPal, described above, uses only session storage; no names are saved in persistent local storage. You can change your selection or clear the site’s data in your browser.

After an order, a necessary cookie protects access to its page and downloads for up to 30 days. The recovery code can restore access for up to 365 days, subject to the order’s retention period. Deleting cookies ends remembered access on that device but does not delete the order.

Fonts and illustrations are served by the site. Necessary purchase cookies work without analytics. Google Analytics and Google Ads, when enabled, are offered with separate permission choices, as explained below. The payment service applies its own rules when you use it.

Optional measurement

Google Analytics, when enabled, measures public page visits and the purchase journey, using catalogue products, the cart and confirmed purchases. Google Ads, when enabled, measures ads. Each purpose has a separate choice, off by default. No Google tool loads before your permission. Rejecting does not change prices, features or access to your order. Cookie choices at the bottom of every page lets you change your permission. Withdrawal stops subsequent measurement, clears measurement cookies accessible to the site and reloads the page.

After consent, Google receives technical connection and browser information, a pseudonymous measurement identifier and the address of public pages visited. URL parameters, fragments, names, emails, order references and recovery codes are not added to events created by the site. If you arrive from Google or Bing, only the recognized search domain may be retained, without its path or search terms; other referrer addresses are discarded. Site events use predefined labels for recognized campaigns. After your permission, the Google tag may also process campaign parameters and click identifiers present in the page address. Personalisation, checkout, recovery and contact pages are excluded. With your separate Google Analytics or Google Ads permission, a confirmed real purchase can be measured on a separate page using a random measurement reference unique to the purchase. Google Ads receives the paid euro amount. Google Analytics receives fixed catalogue identifiers and labels for purchased products and their quantity; when the purchase tax records are verified, it also receives the amount and item prices excluding tax, with tax separately. These monetary fields are omitted if those records are absent or unverified. No personalised label is used. No name, email, personalisation detail, PayPal identifier or order reference is sent in this event. Automatic form, link and download measurement, personalised advertising, enhanced conversions and Google Signals are disabled. These statistics are not described as anonymous.

Purchase measurement uses a temporary secure cookie lasting 2 minutes to return to the correct order. The random measurement reference and attempt are kept with the private order record to prevent duplicates; this does not prove Google received the event. Refusal, a blocked Google tag or a timeout never prevents access to purchased files.

Your acceptance or rejection is remembered in your browser for 180 days. If browser storage is blocked, the choice applies only to the current page. Google Analytics uses _ga cookies; Google Ads may use _gcl_… cookies for ad measurement. The requested cookie lifetime is limited to 180 days. Event and user data retention in the Analytics property, when enabled, is set to 2 months; this period does not apply to standard aggregated reports or Google Ads retention rules.

Google may process data outside the European Union, including in the United States. Its information about processing and transfer mechanisms is available below. You can also contact us to exercise the rights described at the end of this page.

Google privacy · Data transfer frameworks

Order information

To process a purchase, we use the adult’s email, language, purchased games and versions, options, certificate count, euro amount, order and payment references, status and dates. This checkout on our site does not request a billing address. No parcel is sent. We also keep the terms version, your acceptance of the terms and immediate-access choice with their date, to record what was agreed.

Order processing, delivery and support are based on performing the contract. Accounting records are kept to meet the seller’s applicable legal obligations. Access controls, abuse prevention and security rely on our legitimate interest in protecting the service and purchases. Support messages are used to handle your request, not for advertising.

Support requests may retain your message, its type, the order reference and handling dates. Do not include unnecessary information about a child. Transactional confirmation tracking may also keep delivery status, without reusing your email for a newsletter.

PayPal and service providers

PayPal processes payment under its own responsibility and sends us the references and outcome needed to manage the order. The site does not collect your full card number. PayPal may request its own payment or billing information; your use of its service is covered by its privacy statement.

Read PayPal’s privacy statement

Hosting and transactional email providers may process the information needed for their services. Contact us with a question about this processing or the providers. This page does not claim that all data is hosted in France or the European Union.

For how long?

The configured period for order records outside the specific tax-record retention is 365 days. It is saved with the order, separately from file access, which is limited to 365 days. Access expiry does not delete a record still within its retention period. A support request, unreconciled payment or legal hold requires review before deletion. Older records without a defined period are also reviewed. Access credentials expire earlier according to the limits above.

Older orders with a tax record retain the information and retention period recorded when they were processed. The current checkout does not create connection-country evidence for VAT. A retention period does not extend file access.

Temporary request-rate controls expire after one hour. Payment notifications are not retained as full copies containing personal data: only references needed for tracking and duplicate prevention are used. Server and hosting logs may be used for service security.

Your rights and contact

Depending on the applicable rules, you may request access, correction, erasure, restriction or portability, and object to certain uses based on legitimate interests. Some data may need to be kept to meet a legal obligation or defend a right. Any verification of your request should be proportionate; do not send identity documents without being asked.

You can also complain to the competent data protection authority, including the CNIL in France. Contact the CNIL

Read the legal notice