Privacy Policy
Last updated: 12 November 2026
In short: there are no ads or trackers, and you only need an email if you subscribe to Premium. To run the game and stop abuse, we keep what you say to the characters together with your IP address for 30 days, then delete it automatically. If you subscribe, we keep your email so you can sign in. Everything else we keep is anonymous daily totals.
1. Who we are
French from Home (frenchfromhome.com, “the game”, “we”, “us”) is run by Hamza Tatheer, Vilnius, Lithuania, who is the data controller for the personal data described here. You can contact us through LinkedIn.
2. What we collect, why, and for how long
| Data | Why | How long |
|---|---|---|
| Your conversations with the characters: what you type or say (as text), the characters’ replies, your IP address, the country it belongs to, a random visitor ID, the level and the time. | To run the game, and to find and stop abuse of it (for example spam, harmful content or attempts to misuse the AI). We may block an IP address that is used for abuse. | 30 days, then deleted automatically. |
| Visits: which levels you open, whether you use a phone or a computer, your IP address, its country and a random visitor ID. | To understand how the game is used and to spot abuse. | 30 days, then deleted automatically. |
| Subscriptions: your email address, the payment provider’s customer and subscription references, and the subscription’s status (for example active or cancelled). We never see or store your card details. | To give you Premium and let you sign in to it on any device (performing our contract with you), and to keep records the law requires. | As long as the game runs, and longer only where the law requires it. |
| Sign-in: your email address, a one-time 6-digit code (kept only as long as it is valid, at most 15 minutes) and a sign-in session linked to your email. | To check that you own the email you sign in with, and keep you signed in. | Codes: 15 minutes. Sessions: until you sign out, or 1 year. |
| Anonymous daily totals: number of visits and visitors, countries, devices, levels started, AI usage and errors. | To see how the game is doing and keep its costs under control. | Up to about 13 months. These totals contain no IP addresses and can’t identify you. |
| Technical server logs: IP address, time and page requested. | To keep the server running and secure. | A short time: older entries are overwritten automatically. |
Countries are looked up on our own server from a local copy of the DB-IP database; your IP address is not sent anywhere for this. To count unique visitors in the daily totals we use a scrambled form of your IP address that changes every day and can’t be reversed.
We collect purchase and sign-in data to perform our contract with you (Article 6(1)(b) GDPR), and the rest under our legitimate interests (Article 6(1)(f) GDPR) in running the game, keeping it safe and preventing abuse. Please don’t share personal details (such as your full name, address or phone number) in your conversations; the game never needs them.
3. Services that process your data
- AI model: the characters’ replies are written by an AI model from an external provider, which receives what you say in the game to answer you. The provider is in the United States, so this data is transferred outside the EU; under its business terms it may not use it to train its models.
- Speech recognition: when you hold 🎤, your browser’s built-in speech service turns your voice into text. We only receive the text; you can type instead.
- Payments: Premium is sold through a payment provider that acts as its seller (reseller). It handles your payments, card details, receipts, taxes and cancellations under its own privacy policy, and tells us your email address and your subscription’s status.
- Email: sign-in codes are sent through an email delivery service, which receives your email address and the code.
- Hosting: the game runs on a hosting provider’s server.
4. On your device
The game remembers your settings in your browser’s local storage: sound and music on or off, whether you’ve seen the guide, finished levels, and a random visitor ID. These stay on your device. If you start a purchase, it also remembers the email you entered, so we can send you your code when you come back. Clearing your browser’s site data removes all of this.
When you sign in, we set one cookie, paris_session, that keeps you signed in for up to a year. It is strictly necessary for the service you asked for, so it doesn’t need consent. If you use a premium pass, it isn’t stored on your device: you type it each time you open a Premium level, and it isn’t linked to your email or any other personal data. We don’t use any other cookies, ads, analytics services or tracking pixels.
5. Your rights
Under the GDPR you can ask to see the personal data we hold about you, have it corrected or deleted, restrict or object to its use, or receive a copy. For conversations and visits, please tell us roughly when you played and your IP address so we can find your data; for a purchase, the email you used. Contact us through LinkedIn.
You also have the right to complain to a data protection authority. In Lithuania this is the State Data Protection Inspectorate (vdai.lrv.lt); you can also contact the authority where you live.
6. Children
The game is not meant for children under 13. If you are under the age of digital consent where you live, please play with a parent’s permission.
7. Changes to this policy
We may update this policy, for example when the game changes. The date at the top shows the latest version.