Privacy Policy · The Tavern

Last updated: 24 October 2026

In short

No account, no advertising in the app.
The players' first names, genders and who they are attracted to, which you enter to play, stay on your phone, unless you share a Battle Royale recap, whose link contains the players' first names and genders.
Usage data, the measurement of our advertising (with Google on Android, Apple on iPhone) and crash reports are only sent with your consent. You can change your mind at any time in the settings.
A few anonymous statistics are sent without your consent, as they say nothing about you: they are described in detail below.
The ascentstudio.app website does not set any cookies.

1. Data controller

Ascent Studio App, a French SAS with a share capital of €1,000, registered with the Lyon Trade and Companies Register (RCS) under number 993 734 383.

For any question about your data: contact@ascentstudio.app.

This policy covers The Tavern app (iPhone and Android) and the ascentstudio.app website.

2. Data stored on your phone

Many types of data stay on your phone: we never receive them. They are stored in the app's storage and deleted if you delete the app. They may also be included in your phone's backup (Google or iCloud), which restores them if you reinstall the app.

The players' first names, their gender and who they are attracted to, entered for a game. They are used solely to adapt the cards.
The Purity Test leaderboard (first names and scores) and the "My stats" page (nights, games, which games were played, first names in "The crew").
Your settings: language, vibration, notifications, responses to consent requests.

Notifications are prepared and scheduled on your phone. No server sends you notifications, and we do not collect any notification identifier.

3. Data transmitted, by processing activity

Operation of the app

Data: an installation identifier created by Google Firebase, the app version, the phone's operating system and an attestation of the app's authenticity (App Check, via Play Integrity on Android and App Attest on iPhone).
Purpose: to receive the app's settings and current offers (Firebase Remote Config, for example Happy Hour), to assign users to A/B tests (comparison of two versions of a screen) and to protect our servers against fraudulent requests.
Legal basis: our legitimate interest in providing an app that works and is protected. Reading this information is strictly necessary for the service you request.
Consent: not required.
Retention period: in accordance with Google's rules for Firebase.

When you open the app, while it is loading, a window asks for your consent. Its first screen offers "Accept", which accepts everything, and "Continue without accepting", which declines everything. "Customise" opens its "Settings" screen, where you choose three consents separately: usage data, crash reports and the measurement of our advertising, described here and below. Each one can be accepted or declined independently of the others. If you decline a consent, none of the data it covers is sent.

If you decline all three consents in this window, it is shown to you again only once, 6 months later, and then never again. A consent withdrawn in the app's settings is not requested again.

Data: a randomly generated identifier, specific to this phone, with no link to your name or to an account; the app version, the platform (iOS or Android) and its version, the phone model, the language of the app and that of the phone, the country from your region settings (never your location), the phone's time zone offset; your subscriber status and the product chosen; whether or not a connection was available at startup and how long startup took; the A/B tests you take part in; the screens viewed and the time spent on them, the buttons tapped, the games started and finished (which game, mode, number of players, number of men and women when gender is requested, cards seen, Purity Test scores, titles in the Battle Royale recap), the choices made in the games (truth or dare, the answer in "Would You Rather"), the notifications scheduled and opened, the settings changed, the steps on the purchase page and the outcome of a purchase.
Data never sent: first names, what you type, the text of the cards, the position of your fingers on the screen, your location.
Purpose: to understand what players enjoy and what causes difficulties, and to improve the games and the app.
Legal basis: your consent.
Retention period: 25 months, then automatic deletion.
Storage location: Google BigQuery, in the European Union.

This data is pseudonymised, not anonymous: it is linked to the randomly generated identifier.

If you have agreed to usage data collection, this identifier is also passed to our subscription provider (RevenueCat), in order to link any purchases you make to your usage data.

Data: when the app crashes or encounters an error, a technical report (location of the error in the code, phone model, operating system, app version, memory status, Firebase installation identifier). If you have also agreed to usage data collection, the report carries the randomly generated identifier.
Purpose: to fix errors.
Legal basis: your consent.
Retention period: 90 days in the Firebase Crashlytics tool (period set by Google), and at most 25 months in our working copy, located in the European Union.
Provider: Google Firebase Crashlytics.

We promote The Tavern through ads on Google (Android) and on Apple Ads (iPhone). With your consent, the app makes it possible to know whether an ad led to an installation, then to a free trial or a subscription.

On Android:

Data: your phone's advertising identifier and an instance identifier created by Google Analytics; the events that Google Analytics records by itself (first open, sessions, time spent, in-app purchases), with the phone model, its operating system, its language and its country; the start of a free trial (offer chosen, Happy Hour or not); your subscription payments, which our subscription provider (RevenueCat) passes to Google Analytics with the instance identifier.
Provider: Google (Google Analytics for Firebase, Google Ads).

On iPhone:

Data: an attribution token provided by Apple (AdServices), which RevenueCat sends to Apple to find out whether your installation came from an ad on Apple Ads, and which one (campaign, keyword). The app does not read the iPhone's advertising identifier.
Providers: Apple (Apple Ads), RevenueCat.

For both:

Data never sent: first names, what you type, the text of the cards.
Purpose: to measure the effectiveness of our advertising, and to allow Google to show our ads as a priority to people likely to enjoy the app. This data is not used to show you personalised ads.
Legal basis: your consent.
Retention period: Google Analytics keeps event-level detail for 2 months, then only aggregated figures. Google Ads and Apple keep their campaign statistics under their own rules. RevenueCat keeps the attribution with your subscription history.

To measure our advertising, Google and Apple also use this data on their own behalf, under their own privacy policies.

Changing your choices regarding usage data, crash reports and our advertising

In the app's settings, use the "Usage data", "Crash reports" or "Ad measurement" line. Each line only sets its own consent: "Usage data" does not apply to the measurement of our advertising. If you have accepted everything, a single line groups all three together and reopens the consent window.

When you withdraw a consent, the sending it covers stops immediately. Then:

usage data: the randomly generated identifier is deleted from your phone. The usage data already received with this identifier is deleted during the next automatic clean-up (every morning), as are the crash reports in our copy that carry it. Your purchases already received are retained, but detached from this identifier;
crash reports: Google's tool is fully disabled the next time the app is launched. Reports already in Google's Crashlytics tool remain there until they are automatically deleted, after 90 days;
measurement of our advertising: Google Analytics is switched off and its data on your phone is deleted, and the instance identifier is removed from RevenueCat; on iPhone, the collection of Apple's attribution token (AdServices) stops the next time the app is launched. What Google, Apple and RevenueCat have already received remains with them until the end of the retention period stated above.

To enable this deletion, we keep the list of withdrawn identifiers for no more than 400 days. If you accept again later, a new identifier is created, with no link to the previous one.

We also keep, without any identifier, each of your responses to the consent request, as well as each consent changed in the settings: acceptance or refusal of each of the three consents, the button used (for example "Continue without accepting"), when the response was given (first opening, new request after 6 months, or settings), date, platform and app version. These responses allow us to know how many people accept, without knowing who.

These three types of data carry no identifier, no first name and no precise time. They cannot be linked to you or to your phone.

Game statistics: for each game played, the day, which game it was, the modes and themes, the number of cards, challenges, penalties and players, and, for the Purity Test, the scores. They are used to find out which games and modes are played.
"Would You Rather" votes: for each question, the number of players who chose each answer, added to a total. This total makes it possible to display the percentages across all players.
The counter of parties going on now: when the app is open, it adds 1 to a counter, at most once every 3 hours. No other information is sent. This counter makes it possible to display the number of parties going on now.

Legal basis: our legitimate interest in improving the games and displaying these shared figures. As this data is anonymous and limited to what is strictly necessary, your consent is not requested. It is kept indefinitely, since it contains no data about you.

As with any internet connection, your IP address is technically visible to our servers (Google Cloud) at the time of sending. It is not recorded with these figures. Google's technical logs may keep it for a few weeks, for security purposes.

Subscriptions and purchases

Each time the app is launched, it queries our subscription provider (RevenueCat) to display the offers and check your VIP status, whether or not you are a subscriber.

Data: a purchase identifier randomly generated by RevenueCat on first launch, your subscription history (product, date, price, currency, store country, trial, renewal, cancellation, refund) and the store used (App Store or Google Play).
Purpose: to display the offers and their prices, check your VIP status, unlock content, restore your purchases and track our sales.
Legal basis: the performance of your subscription (the contract) and our accounting obligations; if you are not a subscriber, our legitimate interest in presenting the offers to you.
Retention period: 25 months in our sales statistics. RevenueCat keeps the history for as long as the service requires. Apple and Google keep their own data under their own rules.
Providers: RevenueCat, Apple (App Store), Google (Google Play).

We never receive your bank details, your name or your Apple or Google email address. Payment is handled entirely by Apple or Google, which act as controllers of their own processing.

"Contact us" form

Data: your email address, your message, the RevenueCat purchase identifier, the platform (iOS or Android) and the app version.
Purpose: to reply to you, and to locate your subscription if your request concerns it.
Legal basis: our legitimate interest in responding to your request, or the performance of your subscription if your request concerns it.
Retention period: the time needed to handle your request, then at most 3 years after our last exchange.
Provider: EmailJS, which forwards the message to our email inbox.

Please note: the purchase identifier links your message to your purchases, and therefore to your usage data if you have agreed to its collection.

Saving an image to your photos

You can save the image of a result to your photos. On iPhone, the app then asks for your permission to add a photo. It never has access to your existing photos, and the image is not sent to us.

When you share a result, the app creates a link to ascentstudio.app/lataverne/… The result is contained in the link: the website reads it to display the page and its preview image, without storing anything in a database.

Purity Test: the scores for each theme, a code to put the text in the masculine or feminine form, and the language. No first name.
Battle Royale: for each title in the recap, the first name(s) of the players, their gender (to adapt the text) and the score. The first names are readable in plain text.
My stats: your counters (nights, games, challenges, penalties) and your favourite games. No first name.

You decide whether or not to share, and with whom. Only share the Battle Royale recap with the players' consent. Anyone who has the link can view the page. Once sent, a link can no longer be withdrawn. Preview images may be cached by our host and by messaging apps.

4. The ascentstudio.app website

No cookies, no analytics, no advertising.
The website is hosted by Cloudflare. Like any host, Cloudflare sees your IP address and the technical information about your connection, in order to display the pages and protect the website against attacks. Legal basis: our legitimate interest in operating and securing the website.

5. Recipients of the data

Your data is not sold, rented or shared with other advertisers.

It is processed by our technical providers, who act on our behalf (processors):

Google (Firebase, Google Cloud, BigQuery, Crashlytics, Remote Config, App Check, Google Analytics): app servers, usage data, crash reports, measurement of our advertising on Android.
RevenueCat: subscription management.
EmailJS: sending messages from the "Contact us" form.
Cloudflare: hosting of the website and the share pages.

Apple (App Store) and Google (Google Play) also process data for payment and for the management of your subscription. They do so on their own behalf, under their own privacy policies.

With your consent, Google (Google Ads) and Apple (Apple Ads) also receive the data from the measurement of our advertising, which they also use on their own behalf.

We may also disclose data where the law requires us to, for example at the request of an authority.

6. Transfers outside the European Union

The app's servers (Google Cloud functions and BigQuery data warehouse) are located in the European Union. However, some providers are established in the United States or may process data there: Google, RevenueCat, EmailJS and Cloudflare.

These transfers are covered:

either by the EU–US Data Privacy Framework, where the provider is certified under it (this is the case for Google and Cloudflare);
or by the European Commission's standard contractual clauses, included in our contracts with these providers.

You can obtain more information about these safeguards by writing to contact@ascentstudio.app.

7. Retention periods, in summary

Usage data: 25 months.
Measurement of our advertising: 2 months of detail in Google Analytics, then aggregated figures.
Sales statistics: 25 months.
Crash reports: 90 days at Google, at most 25 months in our copy.
List of withdrawn identifiers: at most 400 days.
Responses to the consent request, anonymous game statistics, "Would You Rather" votes, parties counter and numerical summaries: indefinitely, as they are anonymous.
"Contact us" messages: at most 3 years after our last exchange.
Data on your phone: until the app and its backup are deleted.

8. Your rights

You have the right:

to access your data and receive a copy of it;
to have it rectified if it is inaccurate;
to have it erased;
to restrict its use;
to object to processing based on our legitimate interest;
to withdraw your consent at any time, without affecting the processing carried out before the withdrawal;
to receive the data you have provided to us, in a readable format (portability);
to set out instructions regarding what happens to your data after your death.

How to exercise them:

Usage data and crash reports: to stop sending them, withdraw the corresponding consent in the app's settings. Withdrawing consent to usage data also erases what we have received with your identifier, crash reports included: the deletion takes place automatically the following morning. Reports already in Google's Crashlytics tool are deleted after 90 days.
Measurement of our advertising: to stop it, withdraw your consent using the "Ad measurement" line in the app's settings. This withdrawal does not erase what Google, Apple and RevenueCat have already received.
Any other request (a copy of your data, the correction of your email address, your purchases, our exchanges): write to us using the app's "Contact us" form, which attaches your purchase identifier so we can locate your data, or email us at contact@ascentstudio.app. As we do not know your name, we may ask you for information that allows us to locate your data. We will reply within one month.
Payments: Apple and Google manage their own data; please contact them directly.
Anonymous data (game statistics, votes, parties counter): it cannot be linked to you, so we can neither locate it nor erase it.

If you believe that your rights have not been respected, you may lodge a complaint with the CNIL, the French data protection authority: www.cnil.fr.

9. Minors

The Tavern is reserved for people aged 18 and over. We do not seek to collect data concerning minors. If you believe that a minor has sent us data (for example via the contact form), write to us: we will delete it.

10. Security

We take measures to protect your data:

exchanges between the app and our servers are encrypted;
our servers only accept requests coming from the genuine app (App Check);
data sent to our servers is filtered: anything that is not expected is discarded;
access to data is restricted to the people who need it.

11. Advertising and advertising identifier

The Tavern does not display any advertising. With your consent, and only to measure our own advertising:

on Android, Google Analytics reads your phone's advertising identifier and passes the data described above to Google. You can also reset or delete this identifier in your phone's settings;
on iPhone, only Apple's attribution (AdServices) is used. The app does not read the advertising identifier and does not ask for Apple's tracking permission.

This data is not used to show you personalised ads.

12. Changes to this policy

We may update this policy when the app or the law changes. The date of the latest update appears at the top of the page. If a significant change concerns the use of your data, we will inform you in the app. If we wished to use your data for a new purpose requiring your consent, we would ask for it beforehand.

13. Language

This policy may be translated into other languages. In the event of any difference between a translation and the French version, the French version prevails.