Privacy Policy · The Tavern

Last updated: 30 September 2026

In short

No account, no advertising, no ad tracking.
The players' first names, genders and who they're attracted to, which you enter to play, stay on your phone.
Usage data and crash reports are only sent if you accept. You can change your mind at any time in the settings.
A few anonymous figures are sent without your consent, because they say nothing about you: we explain which ones below.
The ascentstudio.app website doesn't set any cookies.

1. Who is responsible for your data

Ascent Studio App, a French SAS with a share capital of €1,000, registered with the Lyon Trade and Companies Register (RCS) under number 993 734 383.

Contact for any question about your data: [email protected].

This policy covers The Tavern app (iPhone and Android) and the ascentstudio.app website.

2. What stays on your phone

Lots of things never leave your phone. They are stored in the app's memory and deleted if you delete the app.

The players' first names, their gender and who they're attracted to, entered for a game. They are only used to adapt the cards.
The Purity Test leaderboard (first names and scores) and your "My stats" page (nights, games, which games were played, first names in "The crew").
Your settings: language, vibration, notifications, your answers to the consent questions.

Notifications are prepared and scheduled on your phone. No server sends you notifications, and we don't collect any notification identifier.

3. What is sent, by processing activity

Making the app work

What: an installation identifier created by Google Firebase, the app version, the phone's operating system, and an attestation that the app is genuine (App Check, via Play Integrity on Android and App Attest on iPhone).
Why: to receive the app's settings and current offers (Firebase Remote Config, for example Happy Hour), to assign users to A/B tests (two versions of a screen compared), and to protect our servers against fake requests.
Legal basis: our legitimate interest in providing an app that works and is protected. Reading this information is strictly necessary for the service you request.
With or without consent: without consent.
Retention period: according to Google's rules for Firebase.

Usage data (only if you accept)

When you open the app, it asks whether you agree to help us improve it. If you say no, none of the following is sent.

What: a randomly generated identifier, specific to this phone, with no link to your name or to an account; the app version, the platform (iOS or Android) and its version, the phone model, the app language, the country from your region settings (never your location); your subscriber status and the product chosen; whether the phone had a connection at startup; the A/B tests you are part of; the screens viewed, the buttons tapped, the games started and finished (game, mode, number of players, number of men and women when gender is asked, cards seen, Purity Test scores), the steps on the purchase page.
What is never sent: first names, what you type, the text of the cards, the position of your fingers on the screen, your location.
Why: to understand what people like, what gets in the way, and to improve the games and the app.
Legal basis: your consent.
Retention period: 25 months, then automatic deletion.
Storage: Google BigQuery, in the European Union.

This data is pseudonymised, not anonymous: it is linked to the randomly generated identifier.

If you are a subscriber and have accepted usage data, this identifier is also shared with our subscription provider (RevenueCat), to link your purchases to your usage data.

Crash reports (only if you accept)

What: when the app crashes or runs into an error, a technical report (the place in the code that crashed, the phone model, the operating system, the app version, the memory status, the Firebase installation identifier). If you have also accepted usage data, the report carries the randomly generated identifier.
Why: to fix bugs.
Legal basis: your consent.
Retention period: 90 days in the Firebase Crashlytics tool (set by Google), and 25 months at most in our working copy in the European Union.
Provider: Google Firebase Crashlytics.

Changing your mind about usage data and crash reports

Go to the app's settings, to the "Usage data" or "Crash reports" line. If you accepted everything, a single line groups both together.

When you withdraw your consent:

sending stops straight away; for crash reports, Google's tool stops completely the next time the app is launched;
the randomly generated identifier is deleted from your phone;
the usage data already received with this identifier is deleted during the next automatic clean-up (every morning), along with our copy of the crash reports;
your purchases already received are kept, but detached from this identifier;
reports already in Google's Crashlytics tool stay there until they are automatically deleted, after 90 days.

To be able to carry out this deletion, we keep the list of withdrawn identifiers for up to 400 days. If you accept again later, a new identifier is created, with no link to the old one.

We also keep, without any identifier, your answer to the consent question (accepted or refused, the date, the platform and the app version). This lets us know how many people accept, without being able to know who.

These three types of data carry no identifier, no first name and no precise time. We cannot link them to you or to your phone.

Game statistics: for each game played, the day, the game, the modes and themes, the number of cards, challenges, penalties and players, and for the Purity Test the scores. They tell us which games and modes are played.
"Would You Rather" votes: for each question, the number of players who chose each answer, added to a total. This is what makes it possible to show the percentages for all players.
The counter of parties going on now: when the app is open, it adds 1 to a counter, at most once every 3 hours. No other information is sent. This makes it possible to show the number of parties going on now.

Legal basis: our legitimate interest in improving the games and showing these shared figures. This data is anonymous and limited to what is strictly necessary, which is why we don't ask for your consent. It is kept indefinitely, since it contains nothing about you.

As with any Internet connection, your IP address is technically visible to our servers (Google Cloud) when the data is sent. It is not recorded with these figures. Google's technical logs may keep it for a few weeks, for security.

Subscriptions and purchases

What: an anonymous purchase identifier created by RevenueCat, your subscription history (product, date, price, currency, store country, trial, renewal, cancellation, refund) and the store used.
Why: to know whether you're a VIP, unlock content, restore your purchases, and track our sales.
Legal basis: the performance of your subscription (the contract), and our accounting obligations.
Retention period: 25 months in our sales statistics. RevenueCat keeps the history for as long as the service requires. Apple and Google keep their own data under their own rules.
Providers: RevenueCat, Apple (App Store), Google (Google Play).

We never receive your bank details, your name or your Apple or Google email address. Payment is handled entirely by Apple or Google, which act as controllers of their own processing.

"Contact us" form

What: your email address, your message, the RevenueCat purchase identifier, the platform (iOS or Android) and the app version.
Why: to reply to you, and to find your subscription if your request is about it.
Legal basis: our legitimate interest in replying to your request, or the performance of your subscription if your request is about it.
Retention period: as long as it takes to handle your request, then at most 3 years after our last exchange.
Provider: EmailJS, which forwards the message to our email inbox.

Please note: the purchase identifier links your message to your purchases, and therefore to your usage data if you have accepted it.

Saving an image to your photos

You can save the image of your Purity Test result to your photos. On iPhone, the app then asks for permission to add a photo. It never has access to your existing photos, and the image is not sent to us.

When you share a result, the app creates a link to ascentstudio.app/lataverne/… The result is written into the link: the website reads it to display the page and its preview image, without saving anything in a database.

Purity Test: the scores for each theme, a code to put the text in the masculine or feminine form, and the language. No first name.
Battle Royale: for each title in the recap, the first name(s) of the players, their gender (to adapt the text) and the score. The first names can be read in plain text.
My stats: your counters (nights, games, challenges, penalties) and your favourite games. No first name.

You decide whether to share and who with. Only share the Battle Royale recap with the players' consent. Anyone who has the link can see the page. Once sent, a link can no longer be withdrawn. Preview images may be cached by our host and by messaging apps.

4. The ascentstudio.app website

No cookies, no analytics, no advertising.
The website is hosted by Cloudflare. Like any host, Cloudflare sees your IP address and the technical information about your connection in order to show you the pages and protect the website against attacks. Legal basis: our legitimate interest in running and securing the website.

5. Who receives your data

Your data is not sold, rented or shared with advertisers.

It is processed by our technical providers, who act on our behalf (processors):

Google (Firebase, Google Cloud, BigQuery, Crashlytics, Remote Config, App Check): app servers, usage data, crash reports.
RevenueCat: subscription management.
EmailJS: sending messages from the "Contact us" form.
Cloudflare: hosting of the website and the share pages.

Apple (App Store) and Google (Google Play) also process data for payment and for managing your subscription. They do so on their own behalf, under their own privacy policies.

We may also disclose data if the law requires us to, for example at the request of an authority.

6. Transfers outside the European Union

Our app servers (Google Cloud functions and BigQuery data warehouse) are in the European Union. However, some providers are based in the United States or may process data there: Google, RevenueCat, EmailJS and Cloudflare.

These transfers are covered:

either by the EU–US Data Privacy Framework, when the provider is certified under it (this is the case for Google and Cloudflare);
or by the European Commission's standard contractual clauses, included in our contracts with these providers.

You can ask us for more information about these safeguards at [email protected].

7. Retention periods, in summary

Usage data: 25 months.
Purchase statistics: 25 months.
Crash reports: 90 days at Google, 25 months at most in our copy.
List of withdrawn consents: 400 days at most.
Answers to the consent question, anonymous game statistics, "Would You Rather" votes, parties counter and numerical summaries: indefinitely, as they are anonymous.
"Contact us" messages: at most 3 years after our last exchange.
Data on your phone: until you delete the app.

8. Your rights

You have the right:

to access your data and receive a copy of it;
to have it corrected;
to have it erased;
to restrict its use;
to object to processing based on our legitimate interest;
to withdraw your consent at any time, without affecting what was done before;
to get back the data you gave us, in a readable format (portability);
to tell us what you want us to do with your data after your death.

The easiest way for usage data and crash reports: withdraw your consent in the app's settings, and the deletion happens automatically.

For everything else, email [email protected]. As we don't know you by name, we may ask you for something that allows us to find your data. The easiest way: write to us from the app's "Contact us" form, which attaches your purchase identifier. We'll reply within one month.

Anonymous data (game statistics, votes, parties counter) cannot be linked to you: so we cannot find it to delete it.

If you think your rights are not being respected, you can lodge a complaint with the CNIL, the French data protection authority: www.cnil.fr.

9. Minors

The Tavern is for people aged 18 and over. We do not seek to collect data about minors. If you think a minor has sent us data (for example through the contact form), email us: we'll delete it.

10. Security

We take measures to protect your data:

exchanges between the app and our servers are encrypted;
our servers only accept requests coming from the real app (App Check);
the data sent is filtered: anything that isn't expected is discarded;
access to data is restricted to the people who need it.

11. Ad tracking

The Tavern does no ad tracking. It doesn't use your phone's advertising identifier, doesn't ask for Apple's tracking permission, doesn't use Google Analytics and doesn't combine your data with that of other apps or companies.

12. If this policy changes

We may update this policy when the app or the law changes. The date of the latest update is shown at the top. If a significant change affects what we do with your data, we'll let you know in the app. If we wanted to use your data for a new purpose that requires your consent, we would ask you first.

13. Language

This policy may be translated into other languages. In the event of any difference between a translation and the French version, the French version prevails.