// legal

Privacy Policy

Last updated: January 1, 2025

    This policy applies to expand.gg, operated by an individual under auto-entrepreneur status (sole trader) based in France. As a French-based operator, we comply with the General Data Protection Regulation (GDPR) and French data protection law (Loi Informatique et Libertés).
  

1. Who we are

Expand Gaming (expand.gg) is operated by an individual auto-entrepreneur based in France. For any data-related requests, you can contact us at: privacy@expand.gg

2. What data we collect

We only collect data that is strictly necessary to operate the service. Currently, during the pre-launch phase, we collect:

Email address — when you sign up to our waitlist via the Tally form on our website
Username — optionally provided when joining the waitlist
Technical data — standard server logs (IP address, browser type, pages visited) collected automatically by our hosting provider (OVH)

3. How we use your data

We use your data solely for the following purposes:

To notify you when Expand Gaming launches
To send you early access information and product updates you have explicitly requested
To improve and maintain the website

We do not sell, rent or share your personal data with third parties for marketing purposes.

4. Third-party services

We use the following third-party service to operate our waitlist:

Tally (tally.so) — used to collect waitlist sign-ups. Tally stores your email address and any other information you provide in the form on their servers. Tally is GDPR-compliant. You can read their privacy policy at tally.so/privacy.

Our website is hosted by OVH (OVH SAS, 2 rue Kellermann, 59100 Roubaix, France), which processes standard access logs.

5. Legal basis for processing

We process your personal data on the following legal bases under GDPR Article 6:

Consent (Art. 6(1)(a)) — by submitting the waitlist form, you consent to us contacting you about the Expand Gaming launch
Legitimate interests (Art. 6(1)(f)) — for server logs necessary to maintain website security and performance

6. Data retention

We retain your email address and waitlist information until you unsubscribe or request deletion, or until 12 months after the service launches — whichever comes first. Server logs are retained for a maximum of 12 months.

7. Your rights (GDPR)

As a data subject under GDPR, you have the following rights:

Right of access — you can request a copy of the data we hold about you
Right to rectification — you can ask us to correct inaccurate data
Right to erasure — you can ask us to delete your data at any time
Right to restriction — you can ask us to limit how we process your data
Right to portability — you can request your data in a portable format
Right to object — you can object to processing based on legitimate interests
Right to withdraw consent — you can unsubscribe from the waitlist at any time

To exercise any of these rights, contact us at privacy@expand.gg. We will respond within 30 days. You also have the right to lodge a complaint with the French data protection authority: CNIL (cnil.fr).

8. Cookies

Our website uses strictly necessary cookies only. We do not use tracking or advertising cookies. For more details, see our Cookie Policy.

9. Data security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, or unauthorised disclosure. Our website is served over HTTPS at all times.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify waitlist members of any significant changes by email. The "Last updated" date at the top of this page always reflects the most recent revision.

11. Contact

For any questions or requests regarding this Privacy Policy or your personal data, contact us at: privacy@expand.gg