Privacy Policy
Last updated: June 2026
1. Controller and contact details
Tiny Loop Studios, a French société par actions simplifiée (SAS) with its registered office at 9 rue du Bouloi, 75001 Paris, France (SIRET: 93398005400011), is the controller of the personal data processed in connection with Games4Cast, within the meaning of the EU General Data Protection Regulation (GDPR).
For any privacy-related request or question, contact us at: legal@tinyloopstudios.com or by post at the registered office address above.
Tiny Loop Studios has not designated a Data Protection Officer (DPO), as this is not required given the nature and scale of our processing activities.
2. Categories of data and purposes
2.1 Account and identification data
Data: name, surname, email address, password or authentication identifier, organization, role, subscription plan, account identifiers from Clerk.
Purpose: creation and management of User accounts, authentication, provision of the service, communication about the service.
2.2 Billing and payment data
Data: billing address, VAT number (for companies), partial payment card data processed by Stripe, transaction identifiers, subscription details.
Purpose: processing payments, billing, accounting, fraud prevention.
2.3 Usage and technical data
Data: logs of connections and actions on Games4Cast, IP address, device and browser information, settings, pages visited, events collected via PostHog.
Purpose: ensuring the security of the service, measuring audience and usage, improving features and performance, detecting anomalies and abuse.
2.4 Communication data
Data: content of messages sent via contact forms (Formspree), support requests, feedback, emails.
Purpose: responding to requests, providing support, managing relationships with Users.
2.5 Marketing and newsletter data
Data: email address, preferences, interaction with marketing emails.
Purpose: sending information about Games4Cast, new features and offers, subject to consent where required.
3. Legal bases for processing
Tiny Loop processes personal data on the following legal bases:
- Performance of the contract (Art. 6(1)(b) GDPR): account creation, provision of Games4Cast, customer support, billing.
- Legal obligations (Art. 6(1)(c) GDPR): accounting, tax obligations, responses to lawful requests from authorities.
- Legitimate interests (Art. 6(1)(f) GDPR): securing the service, preventing fraud or abuse, improving features, measuring basic usage (subject to appropriate safeguards and, where required, consent for analytics cookies).
- Consent (Art. 6(1)(a) GDPR): sending marketing communications, placing non-essential cookies or similar technologies for analytics, collecting certain optional information via forms.
4. Role of third-party providers
4.1 Clerk (authentication and account management)
Clerk provides authentication and account management services. Clerk acts as a processor on behalf of Tiny Loop for User identification data used solely for Games4Cast, under a data processing agreement compliant with Art. 28 GDPR.
4.2 Stripe (payments)
Stripe processes payment data (card details, transaction identifiers) to process subscription payments. For core payment processing, Stripe generally acts as an independent controller, as it determines certain purposes and means (fraud prevention, compliance). Tiny Loop and Stripe each inform Users about their respective processing.
4.3 PostHog (analytics)
PostHog is used to collect analytics data on the use of Games4Cast. Tiny Loop acts as controller and PostHog as processor. Analytics cookies or similar technologies are only used with the User's consent, where required.
4.4 Formspree (forms)
Formspree processes the content of forms (contact, feedback). Tiny Loop is controller for these data and Formspree acts as processor, limited to the transmission and storage of messages.
5. Data retention periods
Tiny Loop retains personal data only for as long as necessary for the purposes described above, subject to longer retention required by law.
- Account data: for the duration of the account and up to 3 years after closure, for evidence and legal limitation periods.
- Billing data: 10 years in accordance with accounting and tax obligations (Code de commerce art. L123-22).
- Technical logs: 12 months for security and troubleshooting.
- Analytics data: 13 months, then aggregated or anonymized where possible.
- Support and contact data: for the time necessary to process the request and for 3 years for evidence where appropriate.
6. Security measures
Tiny Loop and its processors implement appropriate technical and organizational measures to ensure a level of security appropriate to the risks, including:
- pseudonymization and encryption of certain data;
- measures ensuring the ongoing confidentiality, integrity, availability and resilience of systems and services;
- procedures to restore availability and access to data in a timely manner in the event of a physical or technical incident;
- regular testing, assessment and evaluation of the effectiveness of security measures.
These obligations result from Art. 32 GDPR.
7. International data transfers
Some of Tiny Loop's providers (Clerk, Stripe, PostHog, Formspree) may transfer data outside the European Economic Area. In such cases, Tiny Loop ensures that appropriate safeguards are in place, such as:
- an adequacy decision from the European Commission; or
- standard contractual clauses approved by the European Commission, possibly combined with additional measures following the case law of the Court of Justice of the EU.
8. Your rights
Under the GDPR and applicable national laws, Users have the following rights:
- right of access to their personal data;
- right to rectification of inaccurate or incomplete data;
- right to erasure of data, in certain circumstances;
- right to restriction of processing;
- right to object to processing based on legitimate interests, on grounds relating to their particular situation;
- right to data portability for data they have provided, where processing is based on consent or contract and carried out by automated means;
- right to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal;
- right to lodge a complaint with a supervisory authority, such as the CNIL in France.
Requests may be addressed to Tiny Loop at legal@tinyloopstudios.com. Tiny Loop may verify the identity of the requester. We will respond within 30 days.
9. Cookies and similar technologies
Use of cookies and similar technologies on Games4Cast is described in our Cookie Policy. For non-essential cookies, Tiny Loop relies on the User's consent, which can be given and withdrawn at any time.