Privacy policy
Last updated: October 2026
This English version is a translation provided for convenience. In case of any discrepancy, the French version prevails. Version française
1. Data controller
L'Échappée (lechappee.app) is published by an independent developer based in France. Contact: contact@lechappee.app
2. Data collected
We only collect the data needed for the Service to work:
- Account data: email address, username (authentication is handled by Firebase Auth / Google)
- Game data: leagues, teams, bids, scores
- Technical data: authentication tokens (Firebase Auth)
- Notifications: device identifier (push token) if you turn on notifications in the mobile app
- Race alerts: email address and followed race, if you ask to be notified from a race page, with or without an account
- Usage data: anonymised app usage statistics (via PostHog) to improve the Service
3. Purposes of processing
- Managing your account and authentication
- Running the game (leagues, mercato, standings)
- Sending transactional emails (welcome, invitations, notifications)
- Sending push notifications (results, mercato, league activity) if you have turned them on
- Sending the race alerts you asked for (route unveiled, mercato opening)
- Anonymised usage analysis to improve the app
4. Legal basis
The processing of your data is based on:
- Performance of the contract (Terms of Use) for account and game data
- Legitimate interest for transactional emails related to the operation of the Service
- Your consent for race alerts, which you can withdraw at any time using the unsubscribe link in every email
5. Data sharing
Your data is not sold. It may be shared with:
- Firebase Auth (Google): for authentication and account management
- Resend: for sending transactional emails
- Firebase Cloud Messaging (Google): for sending push notifications
- PostHog: for anonymised analysis of app usage
- Hosting provider: for secure data storage
6. Data retention
Your data is kept for as long as your account is active. If you delete your account, your personal data is anonymised (name replaced, email deleted). Game data (scores, standings) is kept anonymously.
Race alerts are kept until you unsubscribe, and deleted at the latest at the end of the year following the race concerned. Unsubscribing removes your address from all alerts.
7. Your rights (GDPR)
Under the General Data Protection Regulation, you have the following rights:
- Access: view your personal data
- Rectification: edit your data from your profile
- Erasure: request the anonymisation of your account
- Portability: obtain a copy of your data
- Objection: object to certain processing of your data
To exercise these rights: contact@lechappee.app
8. Cookies
We only use essential cookies needed for the Service to work:
- Authentication: Firebase Auth tokens to keep you logged in
No advertising or tracking cookies are used.
9. Security
We apply appropriate security measures: authentication through Firebase Auth (Google), HTTPS encryption, secure tokens.
10. Contact
For any questions about your data: contact@lechappee.app
You can also lodge a complaint with the CNIL, the French data protection authority: www.cnil.fr