Privacy policy
This is a translation provided for convenience. Only the French version is legally binding.
1. Preamble
This privacy policy informs users of the Lex Ludica website (the Website) about how their personal data is collected and processed, the rights they have over this data, the person responsible for processing it, the recipients of the data, and the Website's cookie policy.
This policy supplements the Website's legal notice and should be read together with it.
2. Principles governing collection and processing
In accordance with Article 5 of Regulation (EU) 2016/679 (GDPR), personal data is processed lawfully, fairly and transparently. It is collected for specified, explicit and legitimate purposes, described in section 4 of this policy. It is adequate, relevant and limited to what is necessary, accurate and kept up to date, and kept in a form that permits identification of data subjects for no longer than necessary for the purposes pursued, as set out in section 7. Finally, it is processed in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage.
3. Legal basis for processing
In accordance with Article 6 of the GDPR, each processing operation carried out by the Website is based on one of the following legal grounds. The user's consent, obtained before processing, is the basis for newsletter subscription, confirmed through a link sent by email (double opt-in). The legitimate interest of the controller, where it does not disproportionately affect the user's rights, is the basis for the security of the Website and the production of overall visitor statistics. Finally, the handling of a request initiated by the user is the basis for processing messages sent to the association by email.
Consent given for the newsletter can be withdrawn at any time, without affecting the lawfulness of processing carried out before its withdrawal.
4. Data collected and purposes
4.1. Data collected
When using the Website, the following categories of data may be collected.
| Context | Data collected |
|---|---|
| Newsletter subscription | Email address, subscription and confirmation dates, IP address at the time of confirmation (proof of consent), email open and click statistics |
| Browsing (automatic) | IP address, browser type, operating system, pages visited, date and time of visit |
| Contact by email | Name, email address and message content |
The Website has no comment section and no user accounts: no other data is collected from readers.
4.2. Purposes
The data collected is used to manage the newsletter, in order to send the latest articles, news about the video game industry and information about the Website. It is also used to manage relations with users, in order to answer requests, questions or enquiries received by email. It further helps improve the Website through overall visitor statistics, in an aggregated form that does not identify visitors, in order to understand which content interests readers and to improve the Website's usability. Finally, it contributes to the security and maintenance of the Website, by preventing misuse and ensuring its technical security, including protection against attacks and intrusion detection.
No data collected on the Website is subject to automated decision-making producing legal effects or significantly affecting the user, within the meaning of Article 22 of the GDPR.
4.3. Content embedded from other websites
Articles published on the Website may include embedded content, such as YouTube or Twitch videos, social media posts or images. Embedded content behaves exactly as if the user had visited the third-party website directly: that website may collect data about the user, use cookies, embed third-party tracking tools and monitor interactions with the embedded content, including for users who have an account and are logged in to that website. The Website has no control over this processing, which is governed by each third-party platform's own privacy policy.
5. Data controller
The controller of the personal data collected on the Website is the association Cercle Vidéoludique, an association governed by the French Law of 1 July 1901 and publisher of the Lex Ludica website.
Association Cercle Vidéoludique
Registered office: 17, quai de Grenelle, 75015 Paris, France
Represented by: Moez RAIS, President and Publication Director
Contact: contact@lexludica.com
The association Cercle Vidéoludique is not legally required to appoint a Data Protection Officer, as its processing does not fall within the cases of mandatory appointment provided for in Article 37 of the GDPR. Any question about data protection may nevertheless be sent to the contact above.
6. Recipients of the data
The personal data collected is strictly confidential and is shared only with the following recipients:
- authorised members of the association Cercle Vidéoludique, within the limits of their duties;
- the host, Cloudflare, Inc. (United States), for the technical hosting and security of the Website, and for audience measurement through its Cloudflare Web Analytics service;
- the newsletter provider, Sendinblue SAS, trading as Brevo (France), which hosts the subscriber list within the European Union;
- Google LLC (United States), through its Gmail service, for receiving and sending messages addressed to the Website's contact address, these messages being routed through Cloudflare's email routing service.
These providers act as processors within the meaning of Article 28 of the GDPR and may only process the data to perform the services entrusted to them, in compliance with the applicable regulations.
Where data may be transferred outside the European Union, in particular to the United States owing to the location of the host and the email service, the transfer is covered by appropriate safeguards within the meaning of Chapter V of the GDPR, such as the adequacy decision on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
7. Retention periods
| Category of data | Retention period |
|---|---|
| Newsletter data | Until unsubscription via the link in each email, or 3 years from the user's last interaction |
| Visitor statistics | Aggregated, non-identifying data, kept for no more than six months by Cloudflare Web Analytics |
| Technical connection logs | A limited period necessary for the security of the Website, according to the host's settings |
| Email exchanges | Up to 3 years from the last exchange |
When these periods expire, the data is deleted or anonymised, unless a longer retention period is required by law.
8. Data security
In accordance with Article 32 of the GDPR, appropriate technical and organisational measures are implemented to protect personal data against unauthorised access, loss, destruction or disclosure. These measures include encryption of exchanges via the TLS protocol (HTTPS), access to the Website's administration restricted to authorised members of the association, and a versioned, backed-up history of all content. The Website consists of static pages and does not rely on any publicly exposed database.
9. Links to third-party websites
The Website may contain hyperlinks to third-party websites. The association Cercle Vidéoludique has no control over these websites and accepts no liability for their data protection practices. Users are advised to read the privacy policy of each third-party website they visit.
10. User rights
Under the GDPR and the amended French Data Protection Act No. 78-17 of 6 January 1978, every user has several rights over their personal data.
- Right of access (Article 15 GDPR): to obtain confirmation as to whether data concerning them is being processed and, if so, to access it.
- Right to rectification (Article 16 GDPR): to have inaccurate or incomplete data corrected.
- Right to erasure (Article 17 GDPR): to request the deletion of their data when it is no longer necessary for the purposes pursued, or when consent is withdrawn.
- Right to restriction of processing (Article 18 GDPR): to request a temporary freeze on the use of their data, in particular when its accuracy is contested.
- Right to data portability (Article 20 GDPR): to receive the data they provided in a structured, commonly used and machine-readable format, and to transmit it to another controller.
- Right to object (Article 21 GDPR): to object, on grounds relating to their particular situation, to processing based on legitimate interest, and to any direct marketing.
- Right to set post-mortem directives on what happens to their data after their death, in accordance with Article 85 of the French Data Protection Act.
These rights can be exercised by writing to contact@lexludica.com, stating the purpose of the request. A reply will be given within one month of receipt of the request; this period may be extended by two further months for complex requests, in which case the user will be informed.
If difficulties persist, users may lodge a complaint with the competent supervisory authority, the French Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr.
11. Cookies
The Website sets no advertising, social media or audience measurement cookies. Visits are measured with Cloudflare Web Analytics, a tool that uses no cookies or local browser storage, no fingerprinting techniques, and does not track visitors across websites. It produces only aggregated statistics (number of visits, pages viewed, referrers, device type), under the consent exemption conditions defined by the CNIL. This is why no consent banner is displayed.
You can object to this audience measurement. The button below turns off the measurement of your visits in this browser. Your choice is stored locally on your device, without cookies, and can be reversed at any time.
Only cookies strictly necessary for the operation and security of the Website may be set by the host, in particular to protect against automated attacks. In accordance with the CNIL's guidelines on cookies and other trackers, these cookies are exempt from consent.
Content embedded from third-party websites (section 4.3) may set its own cookies, according to each platform's policy. Users can configure their browser settings at any time to refuse cookies, bearing in mind that doing so may affect the display of some content.
12. Changes
The association Cercle Vidéoludique, publisher of the Website, reserves the right to amend this policy at any time to ensure compliance with applicable law or to reflect changes in its processing. Users are invited to consult this page regularly.
Last updated: 2 November 2026.