1. Data controller
Josselin Tual, sole trader (SIRET 830 366 415 00032), publisher of Invaders Finder.
Contact for any question about your data: contact@invaders-finder.com.
2. What works without collecting anything
Without an account, the map, the list, the invader pages and your flashed invaders work entirely on your device. Nothing you mark is sent to our servers. The account is optional: it backs up your progress and brings it to another device.
3. Data processed, purposes and legal bases
Account (optional)
- Data: email address, Apple or Google sign-in identifier if you use them, hashed password, app language (to write to you in your language).
- Purpose: create the account, sign you in, reset your password.
- Legal basis: performance of the service you request (contract).
Synced progress
- Data: the invaders you mark as flashed, with their date, and the history of your additions and removals; a daily snapshot of that list, used to restore it after a mistake; last sync date, app version, installation identifier (generated by the app, separate from Apple's advertising identifier), best score in the hidden mini-game.
- Purpose: back up your progress and find it on your devices.
- Legal basis: contract.
Flash Tour
- Data: for each saved tour, its start and end points (often your location when you create it), the chosen invaders, the route, distance, duration, travel mode, and start and end times.
- Purpose: keep your tours and resume one in progress. Routes are computed by Apple Maps or by our own routing server, weather by Apple WeatherKit.
- Legal basis: contract. Tours are only saved when you are signed in.
Location
With your permission ("while using the app"), your location places you on the map and sorts invaders by distance, on the device. It is not sent to our servers, apart from the starting point of a Flash Tour described above. You can withdraw permission at any time in iOS Settings.
Notifications
- Data: the notification token provided by Apple, the installation identifier, your preferences (notification types, followed cities), the app language, and your account if you are signed in.
- Purpose: tell you about new invaders, status changes and support replies.
- Legal basis: your consent, given in the iOS permission prompt and withdrawable in Settings.
Support
- Data: your messages, their subject, the email address you provide (optional in the app), the installation identifier and your account if you are signed in. Messages sent by email or on Instagram follow those services' rules.
- Purpose: answer your requests.
- Legal basis: contract, or our legitimate interest in answering people who write to us.
In-app purchases
- Data: product purchased ("No Ads" or the Pro subscription), dates, price, currency, country, subscription status, purchase identifier (your account's if you are signed in). No payment details: Apple processes the payment.
- Purpose: unlock what you bought, restore it, keep accounts.
- Legal basis: contract and accounting obligations.
Advertising
- The app shows Google AdMob ads. They are non-personalised unless you accept Apple's tracking permission (ATT): Google may then choose them from your activity in other apps and websites, using the device's advertising identifier (IDFA).
- To serve them and prevent fraud, Google processes technical data: IP address (approximate location), device model, ad interactions. In the European Union, the EEA and the United Kingdom, a consent screen (IAB TCF framework, Google's platform) is shown, and you can change your mind in Settings → About → Manage ad consent.
- The tracking permission is asked once, after your first sessions (during which no ads are shown). Declining changes nothing in the app: ads stay non-personalised. You can change your mind at any time in iPhone Settings → Privacy & Security → Tracking.
- Legal basis: your consent for device access and for personalised ads; our legitimate interest for the non-personalised ads that fund the free app. More: how Google uses data.
App usage statistics
- TelemetryDeck (TelemetryDeck GmbH, Germany) counts feature usage anonymously: app opened, invader flashed (city prefix only, never the exact invader), city completed, share image created, ad shown, offer viewed.
- Never sent: location, invader identifier, email, account identifier, advertising identifier. The technical identifier used is hashed on the device and cannot identify you.
- Legal basis: legitimate interest (improving the app from anonymous statistics).
4. The invaders-finder.com website
The website sets no cookies and uses no advertising trackers. Traffic is measured with Cloudflare Web Analytics, without cookies or identifiers: only aggregated statistics are kept (page views, country, device type, referring site). Your IP address is used to deliver the page and is not kept for measurement. Legal basis: legitimate interest; this kind of measurement does not require consent.
Site search runs in your browser and does not send what you type. App Store buttons add a campaign name to the link (for example "web_hero") so Apple can count downloads coming from the site; it does not identify you.
5. Recipients and processors
Your data is never sold. Only the following providers process it, on our behalf:
- OVHcloud (OVH SAS, France): hosting of accounts, progress, tours, notifications and support.
- Supabase: former host, still used by app versions 1.0.9 and earlier until they are updated.
- Google Drive (Google): backup copy, encrypted before upload; Google cannot read it.
- Cloudflare: website hosting, invader catalogue delivery, website analytics.
- Apple: Sign in with Apple, notifications, routes (Maps), weather (WeatherKit), payments.
- Google: Sign in with Google if you choose it; advertising (AdMob) and consent screen.
- RevenueCat (United States): in-app purchase management.
- TelemetryDeck (Germany): anonymous app statistics.
Transfers outside the European Union: Google, Apple, Cloudflare and RevenueCat may process data in the United States. These transfers rely on the EU–US Data Privacy Framework these companies take part in, or on the European Commission's standard contractual clauses.
6. Retention
- Account, progress, tours, preferences: as long as the account exists. Deleting it erases this data from the database immediately.
- Daily progress snapshots: 365 days at most, erased with the account.
- Notification token: until you turn notifications off, the app is uninstalled (Apple then invalidates the token) or the account is deleted.
- Support: as long as the account exists; for a message sent without an account, 3 years after the last exchange.
- Purchases: kept for accounting, but detached from any person when the account is deleted.
- Backups: the database is backed up every night; deleted data leaves the backups within 2 months.
7. Deleting your account
In the app, signed in: Settings → Danger zone → Delete my account. The account and all the data described above are erased, with nothing else to do. If you no longer have the app, write to contact@invaders-finder.com from the account's address.
Deleting the account does not cancel a Pro subscription: manage it in your Apple ID settings (iOS Settings → your name → Subscriptions).
8. Your rights
You have the right of access, rectification, erasure, restriction, objection and portability, the right to withdraw your consent at any time, and the right to give instructions about your data after your death. Write to contact@invaders-finder.com: we answer within one month.
You can also complain to the French data protection authority, the CNIL (3 place de Fontenoy, 75007 Paris), or to the authority of your country.
9. Children
The app works without an account. If you are under 15, ask a parent before creating one: in France, that is required for your consent to be valid. Other countries may set a different age.
10. Security
Traffic between the app, the website and our servers is encrypted (HTTPS). Passwords are stored with irreversible hashing. Server access is restricted to the publisher.
11. Changes
This policy evolves with the app; the date at the top of the page shows its latest version.