This is a translation of the French policy, which is the reference text.
Privacy policy — Dead or Alive
Last updated: November 3, 2026 (daily automatic cleanups, English version).
Who is responsible for your data?
Dead or Alive (“Mort ou Vif” in French) is published by a private individual acting on a non-professional basis (their identity has been provided to the host, Cloudflare, Inc., as required by the French law on confidence in the digital economy, LCEN).
Contact for any question about your data: [email protected].
Without an account
You can play without an account. Your scores, settings and the cards you have won then stay in your browser's local storage (see “Storage on your device”). Without an account you can also read the leaderboards and open a duel link: these reads go through our database and our hosts, which see, like any server, the IP address of the device (technical logs). Apart from these exchanges, only an anonymous audience measurement leaves your device (see below). There is no tracking cookie and no advertising.
With an account (to keep your collection)
| Data | Why | Legal basis | Retention |
|---|---|---|---|
| Login identifier and e-mail address: the one Google sends us if you sign in with Google, or the one you type if you sign in by e-mail (a 6-digit code is sent to you, no password). Google may also send your name and profile picture: they stay in the sign-in service and are never displayed or used. | Recognize you when you sign in | Performance of the service you request (contract) | As long as the account exists |
| Nickname, profile creation date, chosen language | Show you in the game, in the daily challenge leaderboard and in duels, publicly visible (see below) | Contract | As long as the account exists |
| Daily challenge scores (answer grid, speed bonus, points, arrival time, game duration measured by the game) | Compute the leaderboard, publicly visible with your nickname | Contract | As long as the account exists |
| Collection (cards, number of copies, date obtained) | Save your progress | Contract | As long as the account exists |
| Duels: the groups you belong to (code, language), the rounds, your scores, your answer grid and the duration of your game per round, the date you joined, who invited you, whether you left the group | Play with others and rank the group. The other members see your nickname and your scores (see “Duels”) | Contract | A duel ends when all its players have played its 3 rounds. Ended or not, it is no longer accessible 7 days after its last activity (round opened, score sent, new member, invitation), then it is deleted from the database by the daily automatic cleanup. Your duel scores also leave with your account. |
| Friends list: nicknames of your friends, of the people you sent a request to or who sent you one, of the nicknames you blocked | Let you play and compare scores with friends, and invite them to a duel | Contract | As long as the account exists |
| Technical anti-abuse counters (number of nickname searches, actions between players and nickname changes, date) | Prevent anyone from probing the list of nicknames | Legitimate interest | Rows older than one day are deleted by the daily automatic cleanup; everything is deleted with the account |
| Start time of your challenges, duel rounds and timed games (server clock), and counters of games counted and of merges of the day's statistics | Reject an impossible score (faster than the game allows) and limit bursts of submissions | Legitimate interest | Start times deleted after 3 days (8 for a duel round) by the daily automatic cleanup; counters: one row per account, overwritten at each game and deleted once outdated; everything is deleted with the account |
| In-game notifications (friend request, duel invitation, round played: nicknames, duel code, scores) | Notify you in the game | Contract | 7 days, deleted by the daily automatic cleanup; everything is deleted with the account |
| Technical logs (IP address, date) | Security and proper operation | Legitimate interest | A few days, according to our providers |
- Your e-mail is never displayed, never used to send you advertising, and never sold.
- Google sends us neither your contacts, nor your calendar, nor your activity.
- Inactive account: an account stays open until you delete it. An account inactive for 2 years (no sign-in, no session reopened) is deleted automatically, with its data, by a daily cleanup; the game sends no warning e-mail. As the game is recent, no account will reach this threshold before the end of 2028.
Anonymous audience measurement
To know how many people play and to improve the game (for example, to spot cards that are too hard), the game sends a few events: visit, presence every 5 minutes while the page is open, start and end of a game (score and correct answers per card), sharing, card won, and the case where the server rejects a score judged impossible (the reason, the game mode — challenge, duel or game — and the duration of the game, nothing else). With the visit also go the name of the site you came from (the domain only, for example “facebook.com”), the type of screen (phone or computer) and the browser language.
- These events carry a randomly drawn identifier created by your browser. It is renewed every 12 months, is not linked to your account (we only know whether a session is open on the device), and your IP address is not recorded in this measurement.
- Only the publisher of the game looks at these statistics, from a restricted-access administration page. They are neither cross-referenced with other data nor sold.
- Legal basis: legitimate interest (audience measurement exempt from consent). Retention: 13 months at most; older events are deleted every day by an automatic cleanup. The detail of “presence” events is deleted after 30 days: only one row per day remains (random identifier, date, whether a session was open), also kept 13 months at most.
- You can object in one tap: the “Don't take part in statistics” setting in the Profile tab of the game, under “Privacy” (or by opening the game's address followed by #ne-pas-mesurer). Nothing is then sent from this device (the option is kept in its local storage and can be reversed in the same place). You can also write to [email protected].
- To start from scratch, clear the site data in your browser: a new identifier will be drawn.
Public leaderboard
The challenge leaderboard (day, yesterday, week, all time, by region) shows your nickname and your score. It can be read by everyone, including visitors without an account and from the web, without signing in. Your Google name and your e-mail never appear there.
- Choose a nickname that does not identify you.
- Hide your score: the “Appear in leaderboards” setting (Profile tab, “Privacy” section, on by default) removes your nickname and score from the leaderboards seen by other players and from friends' leaderboards, and no longer counts you in their ranks; you still see your own score.
- When a leaderboard has fewer than 10 players, the game adds spirits: imaginary players, marked as such, computed by the game and corresponding to no real person.
- Removal: write to [email protected] stating the nickname (or report it from the leaderboard). We remove or change it within 48 h. Deleting your account also deletes your scores.
Duels
A duel is a group of up to 50 players who replay the same rounds of 10 cards. It is shared by a link, or by direct invitation of a friend.
- Who sees what: anyone who has a duel's link, even without an account, sees the members' nicknames, the scores of each round and the cards played. The link's code is drawn at random, but the link is not protected: share it only with the people you want to see playing. Your e-mail and your Google name never appear there.
- Link preview: when a duel link is shared, messaging apps and social networks show a preview with the nickname of the top player of the latest round and their score. This preview is composed by our host when the link is opened or read.
- Leaving a duel removes it from your page, but your nickname and scores remain visible to the other members until the group disappears (7 days after its last activity) or until your account is deleted.
- Replay with the same group: at the end of a duel, a player can start a new one with the same players. You are added to it (nothing to accept) and notified, unless one of you has blocked the other; you can leave it at any time.
- Invitations: a mutual friend can add you to a duel without a link. There is nothing to accept and no notification: the duel appears in your Duels tab, with the nickname of whoever invited you. You can leave it, then remove or block that friend from Profile › Friends. The number of invitations is capped.
Friends
To add a friend, you search for their nickname (at least 3 letters) and they accept your request. Only nicknames are visible to other players: no other data is shared, neither your e-mail nor your Google name.
- Your nickname can be found by any signed-in player who types its first letters, even if you have never played a challenge (at most 8 results per search, searches are capped). A person you have blocked can no longer find you.
- Your friends list, your sent and received requests and your blocks are saved with your account and are visible to you only (nobody sees your friends list). The friends leaderboard only gathers scores that are already public in the challenge leaderboard.
- You can remove or block someone at any time from Profile › Friends, without them being notified. A blocked person can no longer find you, send you a friend request or invite you to a duel.
- Deleting your account deletes your friends list, your requests and your blocks, and removes you from your friends' lists.
Reporting a nickname
The “Report” buttons (leaderboard, friend requests) open your e-mail app with a message ready for [email protected]: the game sends nothing itself. The message is sent from your e-mail address, which we receive along with the reported nickname and the reason you add. We use them only to handle the report (removal or renaming within 48 h). Retention period of these messages: to be defined.
Storage on your device
The game uses no cookie. It keeps in your browser's local storage, under keys starting with “mov.”:
- your settings (language, effects, sound, timer, display of celebrities' birth year), your last category played;
- your games, your record, your challenge streak, your collection and the counters used to draw it (cards already seen, games without a card, guaranteed cards of the day);
- the challenge or duel round in progress (a single attempt) and the scores waiting to be sent;
- your sign-in session, if you have an account (technical key of the sign-in service), and the identifier of the last account linked to this device;
- the anonymous identifier of the audience measurement, and your choice, if any, not to take part in it;
- the state of the suggestion to install the game on your home screen (declined until a date, or already installed) and that of the suggestion to sign in.
This storage is necessary for the game to work, except the anonymous identifier, covered above. You clear it by clearing the site data in your browser. The game loads no font or image from a third-party site: fonts and photos are hosted with the game. A single third-party script exists: when you open “Continue with an e-mail”, the Cloudflare Turnstile anti-bot check loads from challenges.cloudflare.com (Cloudflare is already our host) to prevent codes from being sent in bulk; it may read technical information from your browser to tell a human from a robot, and is never loaded if you do not open this window.
Who receives your data? (processors)
- Supabase (accounts, database, audience measurement). Servers in the European Union (Paris).
- Cloudflare (website hosting, functions that compose link previews, routing of e-mails received at the contact address, protection of the administration page, Turnstile anti-bot check of the e-mail sign-in). Worldwide network; transfers outside the EU are covered by the European Commission's standard contractual clauses.
- Brevo (sending of sign-in e-mails: your e-mail address and the one-time code pass through its servers while the e-mail is sent; the company is French and hosts its data in the European Union). We do not use Brevo to write to you about anything else.
- Google (“Continue with Google” sign-in, and the inbox of the contact address), under its own privacy policy.
Your rights
You can access your data, correct it, retrieve it (portability), object to processing based on legitimate interest (audience measurement, logs) or ask for it to be erased.
- Deleting your account is one button in the game (Profile). The profile, the collection, the challenge and duel scores, the friends list, the requests and the blocks are deleted immediately. Duel groups you created continue for the other members, without you.
- For anything else, write to [email protected]: answer within one month.
- You can also lodge a complaint with the CNIL (cnil.fr), the French data protection authority.
Age
Accounts are opened from age 15: when you create your account, a checkbox asks you to confirm that you are 15 or older. We neither ask for nor keep your date of birth. Under 15, in France, a parent's consent is required to process your data: play without an account, or ask a parent.
Advertising and payment
- The game is free and contains no payment: we receive neither card numbers nor bank details.
- No advertising is displayed to date and no advertising cookie is set.
- If advertising ever arrives, this policy will be updated beforehand: which ad networks, which trackers, and a banner to accept or decline. Without your consent, no advertising tracker.