Privacy policy
Last updated: September 27, 2026
1. Data controller
The data controller is [À COMPLÉTER : raison sociale et adresse]. For any question about your data: [email protected].
2. Data we collect
- Account: name, email address and profile picture (avatar) shared by Google when you sign in with Google Sign-In.
- Orders: plan, amount, payment status, payment session ID, optional message.
- Payment: handled by Stripe. PlayTesterHub does not store card numbers.
- Tested app: app name, package name, Play Store link, test opt-in link and, where applicable, feedback contact, test credentials and instructions you send us (dashboard, order form or email).
- Tester sign-ups: name or first name, email address, device, country and message sent through the "Become a tester" form.
- Technical logs: IP address, date and time, pages requested, browser, for security and operation.
3. Purposes and legal bases
- Managing accounts and orders and running tests: performance of the contract.
- Invoicing and accounting: legal obligation.
- Website security, fraud prevention, technical logging: legitimate interest.
- Handling tester applications and answering your requests: legitimate interest or pre-contractual steps.
- Any other use (e.g. optional communications): your consent where applicable, which you can withdraw at any time.
We never sell your data and use no advertising trackers.
4. Retention periods
- Account and orders: for the duration of the relationship, then 3 years.
- Accounting records: 10 years.
- Technical logs: 12 months maximum.
- Tester applications (prospects): 3 years without contact.
5. Screenshots (Premium+ plan only)
Screenshots are only taken for the Premium+ plan, on our own test devices. They may contain data displayed by the tested app. They are kept to produce the reports (daily and final), then deleted [À COMPLÉTER : durée] after delivery.
6. Recipients and processors
Your data is accessible to the PlayTesterHub team and, for their part, to the following processors:
- Stripe — online payment.
- Cloudflare — CDN, proxy and network tunnel.
- Google — authentication through Google Sign-In.
- OVH SAS — server hosting (France, European Union).
- [À COMPLÉTER : fournisseur IA utilisé pour les rapports Premium / Premium+ (quotidiens et final), le cas échéant]
7. Transfers outside the European Union
Stripe, Cloudflare and Google may process data outside the European Union, notably in the United States. These transfers rely on the European Commission's standard contractual clauses and/or the EU–US Data Privacy Framework, according to each provider's commitments.
9. Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, and to set instructions regarding your data after your death. To exercise them: [email protected]. We may ask you to prove your identity.
You can also lodge a complaint with the CNIL, the French data protection authority: www.cnil.fr.