Controller and contact
FORMACOM ET ASSOCIES (NELFETECH), 63 rue de la Liberté, 92220 Bagneux, France, determines the purposes and means of the processing described here. Privacy requests may be sent to contact@nelfetech.com.
Launch list
We process your email address, preferred language, consent record and subscription status to send Nelfe Play launch and founding-catalogue news. The legal basis is your consent. You may withdraw it at any time.
Prospect data is retained until withdrawal or for no more than three years after the last meaningful interaction, whichever comes first. Minimal suppression data may be kept to respect an opt-out.
Creator, rights-holder and professional requests
We process the identity and contact details you provide, organisation, public link, project information, message and—where relevant—your authority declaration in order to assess and answer your request.
The basis is taking steps at your request before a possible agreement and our legitimate interest in managing genuine professional enquiries. Unsuccessful or inactive requests are deleted no later than twelve months after the last exchange, unless a legal claim or agreement requires longer retention.
Player accounts
Signing in uses a single-use link sent by email: no password is stored. We keep the address, its fingerprint (used for uniqueness without comparing addresses in the clear), a pseudonym, a cabinet access code and, if you declare it, your country. The basis is performance of the contract giving you access to the store.
The pseudonym is GENERATED: it is never derived from your address, which often contains a first and last name. Your country is asked only when acquiring a game, because distribution rights are granted per territory and the applicable tax depends on it; it also feeds our audience statistics, as totals. Playing requires none of this.
Paired machines and installations
A machine you pair is recorded with a name YOU choose, a public key and a technical identifier. We keep track of which games are installed on it, so that your account can tell you and so an installation does not repeat endlessly. You can revoke a machine at any time: its authorisation ends immediately.
Licences issued are bound to one machine and one duration. They contain neither your address nor your name — only an account identifier, the machine identifier and an expiry.
Measuring what is played
Machines send us the title launched, the system, the session duration and, where applicable, the declared country. They NEVER send who is playing. These measurements serve to know the real audience of titles, and to discuss it with their rights holders. The basis is our legitimate interest in measuring use of the service.
Counting distinct people without naming them requires a specific method: during a month, each account is reduced to a token computed with a secret salt. When the month closes, the totals are kept and THE SALT IS DESTROYED. The tokens then point to nobody, even for someone holding both the database and the list of accounts: only numbers remain, and they are no longer personal data.
Reporting can be switched off from the machine settings. An installation that never opened an account may also send these measurements: it is then attached to no person, only to a local secret that prevents one actor from counting as a thousand.
Approximate location
To place machines on an operations map, we may determine a city from the IP address when a machine registers. The address is resolved and DISCARDED in the same motion: it is written neither to the database nor to a log. Resolution uses a local file, never a third-party service — which would otherwise receive every player’s address.
Coordinates are rounded to a tenth of a degree, about ten kilometres: we locate a town, not a home. Places holding fewer than three machines are not shown, since a town with a single machine names its owner. This location stays declarative and approximate: a machine behind a VPN appears where it exits, and that is its right.
Rights-holder claims
Someone claiming rights over a title sends us their organisation name and whatever documents they consider useful. We keep them for as long as it takes to review the claim and, if it succeeds, for the duration of the relationship. No automatic rule grants these rights: a person reviews and decides.
A title’s audience figures are opened only to the verified rights holder of that title. They are not public.
Game identification reference
We maintain an index of game file fingerprints, used to recognise a title without relying on its name. This index contains no personal data: they are file fingerprints and game names, independent of any person.
Technical security data
Our host may record IP address, request time, user agent and requested resource in technical logs. Nelfe Play uses a temporary keyed fingerprint of the connecting address for abuse prevention; the raw address is not stored in the form database. These operations rely on our legitimate interest in securing the service. Security logs are normally retained for up to six months.
Recipients and processors
No payment data is collected to date. The NelfeTech game platform receives, when you link your player account, your player identity — never your email address.
We do not sell personal data. We do not load advertising networks, social trackers or third-party analytics.
Your rights
Depending on the processing, you may request access, rectification, erasure, restriction, portability or object to processing. Where processing is based on consent, you may withdraw it at any time without affecting earlier lawful processing.
Write to contact@nelfetech.com and specify the request. We may ask for proportionate proof of identity where necessary. You may lodge a complaint with the French data protection authority, the CNIL (cnil.fr).
Security and changes
We use encrypted transport, access controls, prepared database queries, form protection and data minimisation. No internet service can promise absolute security.
Accounts, installations and audience measurement are now active and described above. Payments are not yet: this policy will be completed before they are enabled. Any significant change is dated and explained.