Privacy Policy

MAGNUM PUBLISHING S.A.S

Last updated: September 3, 2025

MAGNUM PUBLISHING S.A.S ("Magnum Publishing", "we", "us", "our")
Paris, France — privacy@mgnm.co

This Privacy Policy explains what personal data we process, why, on what legal basis, for how long, with whom we share it, and your rights. It covers our website, our mobile games/apps, and our recruitment activities.

1) DATA CONTROLLER & CONTACT

  • Controller: MAGNUM PUBLISHING S.A.S, Paris, France
  • Privacy contact: privacy@mgnm.co
  • Supervisory authority: CNIL (France)

2) DATA WE PROCESS

2.1 Website visitors

  • Technical: IP address (possibly truncated), cookie/SDK identifiers, device/browser type, pages viewed, timestamps, security logs (CDN/firewall), anti-fraud signals.
  • Forms: name, email address, message content, preferences (e.g., newsletter).

2.2 Players of our games/apps

  • Device & identifiers: advertising IDs (IDFA/GAID, subject to consent/device settings), internal player/session IDs, device model, OS.
  • Gameplay & events: progress, sessions, economy, in-app purchases (amount, currency, status), features used, stability (crashes/latency), anti-cheat.
  • User acquisition & monetisation: campaign/attribution data (where available), country/language, time zone, ad delivery (impressions, frequency capping, measurement).

2.3 Candidates (recruitment)

  • Application data: identity, contact details, CV/portfolio, messages, interview notes, application history.
  • Technical: logs/events from the recruitment platform.
  • Security & performance (site/games): hosting, CDN, firewall, logs.
    Legal basis: legitimate interests. Retention: security logs 12 months.
  • Audience measurement (website): aggregated statistics, A/B tests.
    Legal basis: consent (or exemption where applicable). Retention: analytics cookies 13 months.
  • Game operation: saves, progress sync, anti-fraud.
    Legal basis: contract performance / legitimate interests. Retention: account life + 24 months inactivity.
  • Product analytics: gameplay events to improve features.
    Legal basis: legitimate interests / consent where required. Retention: 24–25 months.
  • Advertising & monetisation: ad delivery, frequency capping, measurement.
    Legal basis: consent (where required by law). Retention: until consent is withdrawn or campaign cycle ends.
  • User acquisition attribution: measuring campaigns.
    Legal basis: legitimate interests / consent. Retention: 24 months.
  • In-app purchases: validation, fraud prevention, billing.
    Legal basis: contract performance / legal obligation. Retention: accounting records 10 years.
  • Support & contact: responding to your messages.
    Legal basis: legitimate interests / (pre)contractual. Retention: 24 months after ticket closure.
  • Recruitment: assessing applications and interviews.
    Legal basis: legitimate interests / (pre)contractual. Retention: 24 months after last contact.

Where consent is required by law (e.g., for non-essential cookies or personalised ads), we ask for it and you can withdraw it at any time.

4) COOKIES, SDKS & YOUR CHOICES

  • Website: we use essential cookies/SDKs (e.g., security/CDN). If we use analytics or marketing trackers, a consent banner and a Preferences page will let you choose.
  • Games: we use an in-game Consent Management Platform (CMP) (IAB TCF v2.2 compliant) to manage consent for advertising and attribution.
  • Manage/withdraw consent: via the CMP in our games, and via iOS/Android settings (limit/reset advertising ID).
  • Vendor list: the up-to-date list of partners (vendors) is shown inside the CMP. On the website we disclose categories of recipients below and may link a "Partners" page if needed.

5) WHO WE SHARE DATA WITH (CATEGORIES)

  • Hosting / CDN / security (website & backends)
  • Analytics & attribution (website/apps/games)
  • Advertising & monetisation (ad networks/mediation, anti-fraud, measurement)
  • Quality & stability (crash reporting)
  • Emailing / support tools (contact forms, ticketing)
  • Distribution & payments (Apple App Store, Google Play)
  • Recruitment platforms (ATS)
  • Authorities and advisors where legally required or to defend our rights

We require our processors to implement appropriate security and to process data only on our documented instructions.

6) INTERNATIONAL TRANSFERS

When data is transferred outside the EEA, we use appropriate safeguards (e.g., Standard Contractual Clauses) and, where necessary, additional measures (encryption, minimisation, pseudonymisation).

7) YOUR RIGHTS

You have the rights of access, rectification, erasure, restriction, objection, portability, and the right to withdraw consent at any time (without affecting prior processing).

You may lodge a complaint with the CNIL.

How to exercise your rights: email privacy@mgnm.co with (i) the context (website/game/recruitment) and (ii) any useful identifier (e.g., game ID, email, IDFA/GAID). We may ask for information to verify your identity and locate your data.

8) CHILDREN

Our services are not intended for children. In the EEA, parental consent may be required depending on the country (generally 13–16, 15 in France). If you believe a minor provided us with data without proper authorisation, contact us to delete it.

9) SECURITY

We apply technical and organisational measures appropriate to the risk: encryption in transit, access controls, logging, reasonable testing/audits, vendor reviews, and an incident response plan.

10) RETENTION SUMMARY

  • Security logs: 12 months
  • Website analytics cookies: 13 months (or per CMP)
  • Gameplay / attribution events: 24–25 months
  • Support / contact: 24 months after closure
  • Recruitment: 24 months after last contact
  • Accounting: 10 years

11) CHANGES TO THIS POLICY

We may update this Policy. The latest version will always be available on this page with a new "Last updated" date. For material changes, we may notify you (website, in-game, or email, as appropriate).

Contact: privacy@mgnm.co
Controller: MAGNUM PUBLISHING S.A.S, Paris, France