Last updated : 20 août 2026
English translation, provided for convenience. The French version is the only binding text; in case of any divergence, the French wording prevails.
This policy describes exactly what data the game Knapsack processes. The Game contains no advertising, no analytics and no third-party trackers.
All progress is first recorded on your device. If you enable neither cloud save nor Game Center, no data leaves your phone.
| Data | Purpose | Legal basis |
|---|---|---|
| Game Center identifier, or a technical identifier generated on the device | Attaching your progress to you, and to you alone | Performance of the service |
| Game Center nickname | Showing you in the leaderboards | Performance of the service |
| Game progress (tree, achievements, trials, workshop, records, shards) | Restoring your game on another device or after reinstalling | Performance of the service |
| Transaction identifier and reference of the product purchased | Crediting shards once only, and proving the purchase | Contractual obligation |
| Share of the shards spent for a purchase, transmitted to Apple only if you request a refund for it | Allowing Apple to examine your request, and preventing refunds of shards already spent | Legitimate interest |
That last transmission happens only at Apple's initiative, when you ask it for a refund. It is limited to a percentage and an opinion: neither your identifier, nor your nickname, nor any amount appears in it.
If you submit a score, your nickname and your score are published in the Game Center leaderboards and become visible to other players. Those leaderboards are operated by Apple, under its own policy.
From the Game Settings you can:
Only account deletion constitutes erasure within the meaning of the GDPR. Purchase records are excluded from it: they contain no data identifying you and answer an accounting and evidential obligation.
You also have the rights of access, rectification, erasure, restriction and objection provided by the GDPR, as well as the right to lodge a complaint with the CNIL, the French data protection authority. To exercise them, write to [email protected].
The API and its database are hosted by OVHcloud, a French company, in a data centre located in the European Union. Your progress data is not transferred outside the European Union.
Services operated by Apple — App Store, payments, Game Center and leaderboards — fall under its own rules and may involve processing outside the European Union, covered by Apple's own safeguards.
The Game is not specifically aimed at children and knowingly collects no data concerning them beyond what is described above.
Exchanges with the API are encrypted in transit. No data that is sensitive within the meaning of the GDPR is processed.
When Game Center is active, your identity is cryptographically verified: the device has Apple sign a proof, which our server checks before opening a session. Without Game Center, the Game falls back on an unverified local identifier: your progress is then protected from another ordinary player, but not from someone who deliberately modifies the application.