Legal information
Privacy policy
Version 2026-10
This translation is provided for information only. The French version is the only legally binding text.
Draft document, to be completed and approved by the publisher before the public opening. Passages marked “To be completed” are not final yet.
1. Data controller
Identity and contact details of the data controller and, where applicable, of the data protection officer.
2. Data collected
Stratilead collects the minimum needed to play.
- Guest player: a nickname, plus their company’s decisions and results during the game.
- Account: name, email address, avatar and sign-in provider (Google or Microsoft), as well as the sessions, classes and scenarios created.
- Technical data: server logs needed for security and error diagnosis.
No data is sold or used for advertising.
3. Purposes and legal bases
- Running game sessions, classes and the scenario catalog.
- Sending service emails (invitations, moderation decisions, deletion notices).
- Keeping the platform secure and measuring its use in aggregate, without cookies.
Legal basis of each processing operation (performance of the service, legitimate interest…) and record of processing activities.
4. Retention periods
- Guest game data: pseudonymized; the guest access token is purged after 30 days.
- Sessions: kept for 3 years for the facilitator, then anonymized.
- Accounts inactive for 3 years: deleted after a notice sent by email.
- Exports (CSV, PDF reports): available for 30 days.
5. Hosting and recipients
The data and its backups are hosted in France, with ByHoster. Sign-in goes through Google or Microsoft, which share your name, email address and avatar; they receive no game data.
List of processors (email delivery, hosting) and any transfers outside the European Union.
6. Cookies and local storage
Stratilead uses no tracking or advertising cookies, so no consent banner is needed. Only strictly necessary items are stored:
- your account’s session cookie, when you are signed in;
- a game’s guest token, so you get your seat back after a disconnection;
- your theme (light, dark) and language preferences, kept in your browser and never sent.
Audience measurement of the public pages, if enabled, is self-hosted and works without cookies.
7. Your rights
You have the rights of access, rectification, erasure, portability, restriction and objection. Access, export, correction and deletion of your data are self-service from your profile. For any other request: contact@stratilead.fr. You can also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).
Dedicated contact address for personal data and response time.
8. Security
Encrypted connections (HTTPS), encrypted backups, secrets kept out of the code, a log of sensitive actions, no third-party scripts on the platform.
9. Minimum age
Account registration is limited to people aged 15 and over. Stratilead is intended for higher education and adult training.
Conditions under which minors may take part in sessions as guest players.