Privacy policy

Updated on · Version française

Document version: 2.0
Effective date: September 25, 2026
Publisher: Romain Kuss-Brieke, sole trader (French micro-enterprise)
SIREN: 999 030 539
Address: 42 rue Saint-Isidore, 69003 Lyon, France
Contact: [email protected]
App: WillYouDare (Truth or Dare game for adults, Android / Google Play)

1. Introduction

This policy explains what personal data the WillYouDare app collects, why, who it is shared with, how long it is kept and how you can exercise your rights. It applies to the Android app distributed on Google Play.

The data controller is Romain Kuss-Brieke, publisher of WillYouDare (contact details above).

WillYouDare does not require an account, shows no ads and does not sell any data.

2. Data we collect

2.1. Data you enter

  • The nickname and gender (man or woman) of each player, entered at the start of a game. Gender is used to pick which player a card targets. We recommend not entering full names. If you add other players, please let them know about this policy.
  • The content of your messages if you contact support by email.

2.2. Game data

  • Selected pack, variant and difficulty levels, number of players, turn number.
  • Cards played (text and type), nickname of the player concerned and outcome (completed, refused or blocked).
  • End-of-game scores.

2.3. In-app purchases

  • Product purchased, price, currency and date. Payment is handled by Google Play: we never have access to your payment details.

2.4. Identifiers and technical data

  • A random installation identifier created by the app (sent in hashed form) and an anonymous Firebase Authentication identifier, neither of which is linked to your identity.
  • Firebase identifiers (app instance ID) and the Android advertising ID, collected automatically by Google Analytics for Firebase. They are used to measure usage and the performance of our Google Ads campaigns (for example, whether an install or a purchase follows an ad). No ads are shown in the app.
  • Device model, Android version, language, app version, approximate country (derived from the IP address by Google), frequency and duration of use, screens viewed.
  • Crash reports and diagnostic information (Firebase Crashlytics), and app and device integrity checks (Firebase App Check, Play Integrity).

2.5. Age check

When a game starts, the app may ask Google Play (Play Age Signals) whether the Google account on the device belongs to a minor, in order to block access. The result is used on the device at launch: it is neither stored nor sent to the publisher.

2.6. Data that stays on your device

  • Memory photo: if you use it, the camera is only used to take an end-of-game photo, saved to your phone’s gallery with the players’ nicknames and scores. It is never sent to the publisher or to any third party.
  • The player list, your settings and the game in progress are stored on the device so that you can resume a game.

2.7. What we do not collect

Real name, phone number, contacts, GPS location, payment details, and email address unless you write to us.

  • Running the game (players, cards, scores, resuming a game): performance of the service you request (Article 6(1)(b) GDPR).
  • Managing and restoring in-app purchases: performance of the contract. Keeping accounting records: legal obligation (Article 6(1)(c)).
  • Measuring usage and improving the game (usage statistics, content, difficulty): the publisher’s legitimate interest (Article 6(1)(f)).
  • Measuring the performance of our Google Ads campaigns (installs and purchases resulting from an ad): the publisher’s legitimate interest.
  • Monitoring the app’s activity and proper operation in real time on a private dashboard, accessible only to the publisher: legitimate interest.
  • Fixing bugs, securing the app and preventing fraud: legitimate interest.
  • Restricting the app to adults (age check): legitimate interest and compliance with Google Play rules.
  • Answering support requests: legitimate interest.

4. Recipients and processors

Data is accessible only to the publisher. It is hosted and processed on the publisher’s behalf by Google (Google Ireland Ltd and Google LLC), acting as a processor, through:

  • Firebase: Google Analytics for Firebase, Crashlytics, Authentication (anonymous sign-in), Cloud Firestore (dashboard), Remote Config and App Check;
  • Google Play: billing (Google Play Billing), integrity and age signals;
  • Google Ads: conversion measurement for our advertising campaigns, based on data sent by Google Analytics for Firebase.

We do not sell your data. It is used for advertising purposes only to measure our own Google Ads campaigns, never to show ads in the app. It may be disclosed to authorities where required by law.

5. Transfers outside the European Union

Google may process data in the United States. These transfers are covered by the EU–US Data Privacy Framework, under which Google LLC is certified, and by the European Commission’s standard contractual clauses.

6. Retention periods

  • Data stored on the device (players, settings, game in progress, photos): until you delete it in the app, clear the app’s data or uninstall the app.
  • Google Analytics statistics: 14 months maximum.
  • Crashlytics crash reports: 90 days.
  • Activity dashboard (Cloud Firestore): 30 days.
  • Purchase data: accounting records kept for 10 years (legal obligation). Your purchase history remains available in your Google Play account.
  • Support emails: 3 years after the last exchange.

7. Security

Communications between the app and our services are encrypted (HTTPS/TLS). Access to the dashboard is restricted to the publisher’s administrator account and protected by security rules. Installation and player identifiers are hashed before being sent. No system is infallible, so some residual risk always remains.

8. Your rights

Under the GDPR and the French Data Protection Act, you have the rights of access, rectification, erasure, restriction, objection (in particular to usage statistics) and portability, as well as the right to give instructions about what happens to your data after your death.

To exercise them, write to [email protected]. Since the app does not use accounts, please include the nicknames used and the approximate date of the games, if possible, so that we can find the relevant data. We reply within one month.

You can also act directly on your device:

  • delete players in the app, or clear the app’s data from the Android settings;
  • reset or delete your advertising ID in the Android settings (Google › Ads).

If you believe your rights are not being respected, you can lodge a complaint with the CNIL (www.cnil.fr) or with the data protection authority of your country.

9. No account and data deletion

WillYouDare does not offer account creation. To request deletion of the data sent to our services, write to [email protected]: we will delete it within one month, except for data we are legally required to keep.

10. Adults only

WillYouDare contains adult content (sexuality, alcohol) and is restricted to people aged 18 and over. By starting a game, you confirm that all players are adults. If you learn that a minor has used the app, contact us so that we can delete the relevant data.

11. Changes

This policy may be updated, in particular when the app changes. The effective date at the top of the page is then updated.

12. Contact

Romain Kuss-Brieke – WillYouDare

Sole trader, SIREN 999 030 539

42 rue Saint-Isidore, 69003 Lyon, France

Email: [email protected]