Privacy Policy

Last updated: 16 October 2026

Where is Droid? (whereisdroid.com) is a hidden object game for phones and tablets published by Timothé Poznanski, who is responsible for the data described here. Contact: contact@whereisdroid.com.

Playing without an account

The free worlds and the kids mode are played without an account and without giving any information. Your progress then stays only in your browser.

Signing in with Google (optional)

You can sign in with your Google account to buy the paid worlds, then get your purchase and your progress back on all your devices. Google sends the site a signed token that confirms who you are. From that token, Where is Droid? keeps only your email address, which is used to find your purchase with our payment provider. Your name and profile picture, also in the token, are neither kept nor used. Where is Droid? never sees your Google password and has no access to your Google data (mail, contacts, files…).

Data stored on the server

For a player signed in with their Google account (nothing is stored for a player without an account):

• their progress: the objects and bonuses found in each world and in the kids mode, with the date they were found or erased, so that their devices agree.

It is stored in a file of its own for each account, named after a fingerprint of the email address: the address itself is not in it. The photos or pictures you hide in the worlds are never sent to the server: they stay on your device.

For all visitors, the server keeps a technical log (IP address, date, requested page, browser type), used only for the security of the site.

Payment

Payments are processed by Stripe (Stripe Payments Europe, Limited, Ireland). You enter your card details on Stripe's page: we never see them. Stripe gives us what is needed to manage the sale: email address, name, country, amount, date, and the card type and last 4 digits. Stripe is also responsible for its own processing: see Stripe's privacy policy.

Cookies and browser storage

The game only uses cookies that are needed for it to work, with no advertising or analytics:

• your progress (objects and bonuses found) and settings (music, sound effects, language, touch screen), kept for one year;
• wid_google (signed-in account), wid_paid (purchase made in this browser) and wid_sync (date of the last progress sync): up to 400 days, renewed at each visit, signed and not readable by the page's scripts.

The pictures you hide in the worlds are kept in your browser's local storage. You can erase everything from your browser settings.

Third parties

• Google Sign-In: the button is loaded from Google, only when it is shown (in the menu or the purchase window, if you are not signed in), and is subject to Google's privacy policy.
• Google Fonts: some pages load their font from Google's servers, which therefore receive your IP address.
• Stripe: payments, see above.
• Hosting: the site runs on a server rented from Hostinger and located in France.
• Sharing and donations: the share button sends nothing until you choose an app yourself; the authors' names, at the bottom of the game presentation, lead to Ko-fi.

Google and Stripe may process data outside the European Union, with the safeguards provided by the GDPR. Your data is not sold, rented or shared with anyone else, and there is no advertising.

How long data is kept

• The saved progress of an account is deleted automatically after one year without a visit.
• The technical log is deleted after 5 weeks at most.
• Payment records are kept by Stripe for the period required by accounting law (10 years).

Your rights

You can delete your saved progress yourself at any time, from the game menu, with "Delete all my progress": it is erased for good, from the server and from your device, and you are signed out. "Sign out" only forgets your account in this browser. Your purchase stays linked to your Google account: it is found again the next time you sign in.

You can also ask to access, correct or delete your data, or object to its use, by writing to contact@whereisdroid.com from the address of the Google account concerned. Payment records that the law requires us to keep cannot be erased before the end of that period. You can also remove Where is Droid?'s access from your Google account settings.

The processing relies on carrying out your purchase and on what is needed to run the game you ask for. If you live in the European Union, you may lodge a complaint with your data protection authority (in France, the CNIL).

Children

The game is also meant for children, who can play without an account and without giving any information. If you are under the age required to have your own Google account in your country, sign in only with a parent's or guardian's agreement. Purchases are for adults only.

Changes

If this policy changes, the new version is published on this page with its date. See also the Terms of Use and Sale.