Privacy policy

Last updated: July 2026.

GameCompil (https://gamecompil.com) is a portal of free HTML5 mini-games you play straight in your browser. Privacy sits at the heart of the service: every game is playable anonymously, with no account and no personal data. This policy sets out what data is collected, why, on what legal basis, how long it is kept and what your rights are.

Data controller

The data controller is Jaouad Hilali, who publishes the site as an individual (a natural person). For any question about your personal data, about exercising your rights or about deleting your account, write to hjaouad@gmail.com.

Data collected and why

GameCompil applies data minimisation: only the data strictly needed to run the service is collected. You can play every game without creating an account; in that case no personal data is collected and your high scores stay stored locally in your browser.

If you choose to create an account, the following data is processed: your email address, used only to sign you in by magic link (password-free sign-in) and to contact you about your account; your public nickname, the display name you choose, which appears in the leaderboards and on your profile; your scores and high scores, tied to your account to feed the leaderboards and unlock trophies.

Your IP address is processed transiently for rate limiting alone (abuse prevention and anti-cheat, for instance to cap how many sign-in links are sent). It is not kept for identification purposes and is never used to profile you.

Your email address is the only directly identifying data GameCompil processes. It is never shown publicly: other players only ever see your nickname.

Mobile app

The GameCompil mobile app is playable without an account: in that case your high scores stay stored on your device only. If you sign in to your account from the app, the same data as on the site is processed (email address, nickname, scores and high scores) and synced with our servers, in order to feed the leaderboards and the trophies.

If you turn notifications on, a technical device identifier (a notification token supplied by Google’s Firebase Cloud Messaging service) is stored on our servers for the sole purpose of sending you the notifications you asked for. That identifier cannot be used to profile you, and it is deleted when you turn notifications off or delete your account.

The app displays adverts through Google AdMob. Before any consent, only non-personalised adverts are served. Personalised advertising, which rests on your device’s advertising identifier, is switched on only after your consent, collected on first launch through the Google consent form (UMP). You can go back on that choice at any time by resetting the advertising identifier in your Android device settings, or by writing to us at hjaouad@gmail.com.

Legal basis for processing

Processing tied to your account and to gameplay (authentication, score recording, leaderboards, trophies) rests on performing the service you ask for. Securing the service and preventing abuse (rate limiting, anti-cheat) rests on the publisher’s legitimate interest in protecting the platform and the fairness of the leaderboards. Advertising and non-essential cookies rest solely on your consent, which you can withdraw at any time.

Cookies and advertising

GameCompil sets cookies strictly necessary to run the site (your sign-in session, in particular), and those need no consent. The site is intended to serve adverts through Google AdSense. As a third party, Google AdSense may therefore set cookies and use advertising identifiers to display adverts.

Before you have made a choice, only non-personalised adverts may appear: they rest on no cookie and no advertising identifier, and take no account of your history or your profile. Personalised advertising is switched on only after your consent, collected through a certified consent management platform (CMP). No advert is ever displayed over the play area during a game. The full list of cookies, and how to manage or withdraw your consent, are set out on the cookie settings page.

Sharing your data

GameCompil does not sell your personal data and does not share it for commercial purposes. The only data passed to third parties goes to the technical processors strictly necessary to run the service:

• Vercel Inc. — hosting of the site and execution of the server code.
• Neon Inc. — hosting of the database (account, nickname, scores).
• Resend — sending of magic-link sign-in emails and of emails about your account. That provider processes your email address.
• Upstash — temporary technical memory used for rate limiting and anti-cheat security (identifiers derived from the IP address, with a very short lifetime).
• Google — advert delivery (AdSense on the site, AdMob in the app), subject to your consent, and the Firebase Cloud Messaging notification service if you turn notifications on in the app.

No third-party analytics tool is used to date.

Hosting and transfers outside the European Union

The servers hosting the site and the database are located in the United States (“US East” region). Your personal data — email address, nickname, scores — is therefore stored and processed there. The other processors listed above are also companies established in the United States.

These transfers outside the European Economic Area are covered by the safeguards set out in Chapter V of the GDPR: depending on the provider, the European Commission’s adequacy decision on the EU–US Data Privacy Framework and/or the standard contractual clauses adopted by the European Commission. You can obtain a copy of the applicable safeguards by writing to hjaouad@gmail.com.

How long data is kept

Your account data is kept for as long as your account stays active. You can ask for your account to be deleted at any time. On deletion, your account, your email address and your nickname are erased; your past scores are anonymised (reattached to a “Joueur supprimé” profile) so the leaderboards stay meaningful, with no way back to your identity. The IP address used for rate limiting is kept only as long as that security purpose strictly requires.

Your rights

Under the General Data Protection Regulation (GDPR), you have the rights of access, rectification, erasure, objection, restriction of processing and portability of your data. You can exercise them by writing to hjaouad@gmail.com. If you believe your rights are not being respected, you can lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.

Security

Traffic to and from the site is encrypted over HTTPS. Signing in uses a single-use magic link with a short lifetime, so there is no password to remember and none to store. Your email address is never made public. We apply reasonable technical and organisational measures to protect your data against unauthorised access, alteration or disclosure.

Changes to this policy

This policy may be updated to reflect changes to the service or to the regulations. The date it was last updated appears at the top of this page. For any question, write to hjaouad@gmail.com.