01
Who is responsible
The data controller is Olywan SAS, publisher of the Rikochi brand, Bureau 326, 59 rue de Ponthieu, 75008 Paris, France, RCS Paris 933 180 259.
Data protection officer: [email protected]
Legal info · French version prevails
Privacy policy
What we collect, why, for how long, and how to exercise your rights. In plain words.
Last updated: 19/10/2026
02
Data collected
- Account : username or name, email address, password (stored encrypted).
- Billing : name, address, order and invoice history. Card data is processed by Stripe, and PayPal payments by PayPal.
- Use of the services : IP addresses, connection logs for the client area and the services.
- Support conversations : your messages and attachments.
- Audience measurement : website visit statistics through Matomo, see the cookie policy.
Data marked as required in forms is needed to create your account and provide the services; without it, ordering is not possible. Other data is optional. This data comes from you, or from your use of the services (connection logs).
03
Purposes and legal bases
| Why | On what basis |
|---|---|
| Creating and managing your account and services | Performance of the contract |
| Invoicing and bookkeeping | Legal obligation |
| Answering your support requests | Performance of the contract |
| Keeping connection data | Legal obligation (hosting provider) |
| Securing the services, preventing fraud and abuse | Legitimate interest |
| Measuring website audience (Matomo) | Legitimate interest, no consent required under the CNIL's conditions |
| Sending you Rikochi news | Consent, given or refused when creating the account, and withdrawable at any time through the unsubscribe link in emails or from the client area |
04
Retention periods
| Data | Duration |
|---|---|
| Account and services | Duration of the contract, then 10 days after the last due date (service data) |
| Invoices and accounting records | 10 years |
| Connection data | 1 year |
| Support conversations | 3 years after the last exchange |
| Matomo statistics | 25 months at most |
| Prospects without an order | 3 years after the last contact |
05
Recipients
- Authorised Olywan staff, within the scope of their duties.
- Our processors: payments by Stripe and PayPal, email by Microsoft 365 (hosted in France), automated emails (confirmations, invoices) by Mailgun, from its EU region.
- Authorities, upon a legal request.
We do not sell your data.
06
Hosting and transfers
Your data is hosted in France. Our payment providers Stripe and PayPal may process some data in the United States, under the EU–US Data Privacy Framework and standard contractual clauses.
07
Security
We protect your data with measures suited to the risk: access limited to those who need it, encrypted password storage, encrypted connections (HTTPS), DDoS protection and daily backups.
If a data breach puts you at risk, we notify the CNIL within 72 hours and, if the risk is high, we tell you directly.
08
Data hosted by our customers
The data you place on your servers and websites (players, visitors, customers of your shop) remains yours. For this data, Olywan acts as a processor and uses it only to run the service. The terms are set out in the terms and conditions.
09
Minors
Creating an account and ordering are reserved for adults.
10
Your rights
You can access your data, correct it, erase it, restrict its processing, object to it, request its portability and set instructions for what happens to it after your death.
Write to [email protected]. We reply within one month. If you believe your rights are not being respected, you can lodge a complaint with the CNIL (cnil.fr), the French data protection authority.
11
Changes
In the event of a significant change, we will notify you by email or on the website before it takes effect.