Privacy policy
Working version: this document is being legally reviewed. Information in square brackets will be completed before final publication.
1. Our commitment
Tizofun Éducation attaches particular importance to the protection of personal data.
This policy explains what data may be collected, why it is used, with whom it may be shared and what rights may be exercised.
2. Data that may be processed
Depending on how the service is used, data may include:
- name or pseudonym;
- email address;
- account information;
- subscription information;
- order history;
- resources viewed or purchased;
- data needed for games and activities to work;
- information provided by a parent, teacher or administrator;
- technical data;
- IP address;
- browser or device information;
- security data;
- information needed for payments or their verification.
Tizofun Éducation seeks to limit the data collected to what is necessary for the purposes pursued.
3. Purposes
Data may be used in particular to:
- create and manage accounts;
- provide the services requested;
- process orders and subscriptions;
- provide licenses;
- ensure security;
- prevent fraud;
- provide support;
- improve how the platform works;
- manage creators and sellers;
- calculate and pay remuneration;
- comply with legal obligations;
- manage the communications chosen by the user;
- measure certain aspects of the service's performance where this is permitted.
4. Children's data
Tizofun Éducation applies specific measures when the service concerns minors.
Where the applicable regulations require the involvement or authorization of a parent or legal representative, the appropriate mechanisms are put in place.
Children's data must not be used for purposes incompatible with their protection.
5. Sharing data
Data may be disclosed to service providers involved in, in particular:
- hosting;
- payment;
- sending emails;
- technical analysis;
- security;
- support;
- subscription management;
- fraud detection.
These providers receive only the information necessary for their task.
Two third-party services are directly involved in signing in and protecting forms:
- Google (sign in with Google) — when you choose "Continue with Google", Google sends us your name, your email address, the fact that this address is verified and a Google account identifier. We never receive your Google password. This information is used only to create your account or sign you in. This service is optional: you can always use an email address and a password. Sign-in with Google is available to people aged 15 and over.
- Cloudflare Turnstile (protection against robots) — on some forms (sign-up, forgotten password, resending the confirmation link, profile request, sign-in after several failed attempts), a check provided by Cloudflare tells people apart from automated programs. To do so, Cloudflare processes technical data (IP address, browser and device information) for the sole purpose of this check, without advertising or cross-site tracking.
6. International transfers
Where providers or infrastructure located in another country are used, Tizofun Éducation applies the mechanisms required by the applicable regulations.
7. Retention
Data is kept for a period appropriate to its purpose and, where necessary, to the applicable legal obligations.
Periods may vary depending on the category of data.
When an account is deleted, its email address is immediately replaced with a neutral value. Only a fingerprint of that address is kept, as a record of the deletion: it is computed with a secret key and cannot be turned back into the address. The account's other data is kept for 90 days, so that a deletion made by mistake can be repaired, and is then erased automatically.
8. Security
Tizofun Éducation implements reasonable technical and organizational measures to protect data against unauthorized access, loss, destruction, alteration or unjustified disclosure.
Sign-in history. To help you spot a sign-in you don't recognize, your "My account" area shows the last 10 sign-ins to your account: the date and time, how you signed in (password, Google or sign-in card) and the name of the device's browser and operating system. Your IP address is not recorded. Only the 10 most recent sign-ins are kept; they are deleted with your account.
9. Rights
Under the applicable law, the person concerned may have rights such as:
- access;
- rectification;
- erasure;
- restriction;
- objection;
- portability;
- withdrawal of consent where consent is the applicable legal basis.
Requests may be sent to:
[PERSONAL DATA EMAIL]
10. Complaints
Where applicable, the person concerned may also lodge a complaint with the competent data protection authority in their country.
