Privacy Policy

COVEN SAS, a French company with SIRET no. 90157781700017, is committed to protecting your privacy and personal data.

This Privacy Policy explains how COVEN SAS (“COVEN”, “we”, “us” or “our”) collects, uses, stores and protects personal data when you visit our websites, use our games and digital services, contact us, subscribe to our newsletter, purchase products from our online store, or otherwise interact with COVEN.

COVEN SAS
14 rue du Moulin Joly
75011 Paris, France
SIRET: 90157781700017
Email: contact ‘at’ wearecoven ‘dot’ com

Where COVEN determines the purposes and means of processing personal data, COVEN acts as the data controller.

This Privacy Policy is intended to provide the information required under applicable data protection laws, including the EU General Data Protection Regulation (GDPR).

1. Personal Data We Collect

Depending on how you interact with COVEN, we may collect different categories of personal data.

Information you provide directly

This may include:

• First and last name
• Email address
• Company, studio, media or channel information
• Professional information
• Language or communication preferences
• Information contained in messages you send to us
• Information provided when applying for a position
• Information provided when subscribing to our newsletter
• Information provided when purchasing products from our online store
• Information voluntarily provided when interacting with COVEN or participating in our activities

Please do not provide sensitive personal information unless it is necessary for your request.

Information collected through our websites

When you visit our websites, certain technical information may be collected depending on your choices in our cookie consent mechanism. This may include:

• IP address
• Browser and operating system information
• Device information
• Pages visited
• Interactions with our websites
• Technical identifiers and cookie-related information

Our website uses Google Analytics, Google Tag Manager and Meta Pixel. Where prior consent is required, these technologies are not activated before the relevant consent has been provided through our cookie consent mechanism.

We may also use Cloudflare Turnstile to help protect our forms and websites against spam, abuse and automated submissions.

We may use embedded content from third-party services such as YouTube. Such third parties may process information when you interact with embedded content, in accordance with their own privacy policies and according to the applicable configuration and consent settings.

Information relating to games and digital services

Depending on the game or service, COVEN and/or the platform through which you access the game may process information such as:

• Operating system
• Hardware configuration
• CPU and GPU information
• Technical performance and diagnostic information
• Time spent using the product
• Country or approximate location information
• Installation or uninstallation information
• In-app or platform purchases, where applicable
• Platform account information
• Game profile information
• Online interactions, such as messages, groups or events, where applicable

Some games or services may require an account with a platform provider in order to access certain features.

The platform through which you access a game may independently collect and process personal data under its own privacy policy.

Information relating to purchases

When you purchase products through our online store, we may process information necessary to fulfill your order, including:

• Name
• Email address
• Billing information
• Shipping information
• Order details
• Customer support communications

Our online store uses WooCommerce.

Payments may be processed through third-party payment providers such as Stripe and PayPal. COVEN does not generally receive or store your full payment card details.

2. How We Use Personal Data

Depending on the context, we may use personal data for the following purposes.

Website operation and security

We may use personal data and technical information to:

• Operate and maintain our websites
• Protect our websites from abuse, fraud and malicious activity
• Troubleshoot technical problems
• Improve the security and reliability of our services

Contact requests and support

When you contact COVEN through our website or by email, we may use the information you provide to:

• Respond to your request
• Provide technical or customer support
• Respond to press enquiries
• Respond to professional enquiries
• Process job applications
• Communicate with you regarding your request

Newsletter

If you subscribe to the COVEN newsletter, we use the information you provide to send you the communications you requested.

You may unsubscribe at any time using the unsubscribe link included in our emails or by contacting us at contact ‘at’ wearecoven ‘dot’ com.

Professional communications

COVEN maintains professional contact databases for relationships with journalists, media, influencers, content creators, developers, studios, partners and other industry professionals.

We may use professional contact information to send relevant communications concerning COVEN’s games, projects, events, announcements or other professional activities.

For professional recipients, such communications may, where permitted by applicable law, be based on COVEN’s legitimate interest when the communication is related to the recipient’s professional activity.

For recipients for whom prior consent is legally required, we will obtain that consent before sending the relevant commercial electronic communications.

All marketing communications provide an easy way to object to receiving further communications.

Games and digital services

We may use personal data to:

• Provide and maintain games and digital services
• Provide support
• Troubleshoot technical issues
• Improve our products
• Understand how our games and services are used
• Maintain security and prevent abuse
• Operate online functionality where applicable

Analytics and advertising

Where required, and subject to your consent, we may use analytics and advertising technologies to understand website usage, measure campaigns or support our marketing activities.

These technologies include Google Analytics and Meta Pixel.

Where prior consent is required, these technologies are not activated before consent is provided.

Online purchases

We process personal data where necessary to:

• Process and fulfill orders
• Process payments through our payment providers
• Arrange delivery
• Provide customer support
• Manage returns and refunds
• Comply with legal, accounting and tax obligations
• Prevent fraud and protect our business

3. Legal Bases for Processing

Depending on the purpose of the processing, we may rely on one or more of the following legal bases:

Performance of a contract or taking steps at your request before entering into a contract, for example when processing an order or providing a service you requested.

Compliance with a legal obligation, for example where certain information must be retained for accounting, tax or other legal purposes.

Legitimate interests, for example for managing professional relationships, responding to professional enquiries, maintaining the security of our services, preventing abuse and improving our products, where our legitimate interests are not overridden by your rights and freedoms.

Consent, where applicable, for example for newsletter subscriptions or cookies and other technologies that require prior consent.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

For electronic commercial prospecting, the applicable rules depend on the recipient and context. In particular, French and European rules distinguish between communications to professionals in relation to their professional activity and communications requiring prior consent.

4. Professional Contact Databases

COVEN may obtain professional contact information from:

• Information publicly available through professional sources
• Industry events
• Direct interactions with individuals
• Professional websites and publications
• Information provided directly to COVEN
• Previous professional communications

Where we obtain personal data indirectly, we take appropriate steps to provide the information required by applicable data protection law. The GDPR transparency principle applies both to data collected directly and indirectly.

Our professional contact databases may include information such as:

• Name
• Email address
• Professional organisation
• Media or channel
• Professional role
• Language
• Professional interests
• Projects
• Events
• Communication history

We do not use these databases to make decisions producing legal or similarly significant effects about individuals.

5. Newsletter Subscriptions and Unsubscribing

You may subscribe to the COVEN newsletter through our website.

The subscription system may record the source of the subscription and the contact’s communication status.

You may unsubscribe at any time using the unsubscribe mechanism contained in our emails or by contacting us at:

contact ‘at’ wearecoven ‘dot’ com

When you unsubscribe, we retain the minimum information necessary to ensure that we do not send further newsletter or marketing communications to you.

6. Email Tracking

COVEN uses Brevo for certain email communications.

Brevo provides certain campaign-level information that may help us evaluate the performance of our communications.

COVEN does not enable individual email tracking for contacts whose tracking-consent status is unknown.

The processing of email tracking information is subject to the applicable configuration of the email service and applicable data protection law.

7. Cookies and Similar Technologies

Our websites use cookies and similar technologies.

Some cookies and technologies are necessary for the operation, security and functionality of our websites.

Other technologies, including certain analytics and advertising technologies, may require prior consent.

Our websites currently use or may use technologies provided by:

• Google Analytics
• Google Tag Manager
• Meta Pixel
• YouTube
• Cloudflare Turnstile

Where prior consent is required, the relevant technologies are not activated before consent is provided.

You can manage your choices through the cookie consent mechanism available on our websites.

8. Third-Party Services and Platforms

Depending on the service you use, COVEN may work with third-party providers and platforms, including:

• Google
• Google Analytics
• Google Tag Manager
• Meta
• Brevo
• Google Workspace / Google Sheets
• OVH
• WordPress
• WooCommerce
• Stripe
• PayPal
• Cloudflare
• YouTube
• Steam
• Meta / Quest
• Discord
• Kickstarter

These providers may process personal data on our behalf or independently, depending on the service and the role they perform.

Where a provider processes personal data on behalf of COVEN, we take appropriate contractual and organisational measures as required by applicable law.

Where a provider acts as an independent controller, its own privacy policy may also apply.

9. International Data Transfers

Some of our service providers or technology partners may process personal data outside the European Economic Area (EEA).

Where personal data are transferred outside the EEA, COVEN will rely on an applicable legal mechanism under European data protection law, such as an adequacy decision or appropriate safeguards such as Standard Contractual Clauses, where required.

The mechanism applicable to a particular provider may depend on the service, account configuration and contractual arrangements currently in place.

10. How Long We Keep Personal Data

We retain personal data only for as long as necessary for the purposes for which they were collected, taking into account applicable legal, accounting and operational requirements.

Retention periods therefore vary depending on the type of information and the purpose of processing.

For professional contacts, information may be retained while the contact remains relevant to COVEN’s professional activities. We may periodically review professional contact information to identify information that is no longer relevant or necessary.

When a person objects to marketing communications, we may retain the minimum information necessary to respect that objection and prevent further unwanted communications.

Information relating to orders and accounting may be retained for the period required by applicable law.

Information relating to customer support, contact requests and applications may be retained for the period necessary to handle the request and, where applicable, to comply with legal obligations or establish, exercise or defend legal claims.

11. Sharing of Personal Data

We may disclose personal data where necessary to:

• Provide our services
• Operate our websites and online store
• Process payments
• Provide technical or customer support
• Send communications
• Maintain security
• Comply with legal obligations
• Establish, exercise or defend legal claims
• Complete a business transaction, such as a merger, acquisition, financing or sale of assets

We do not sell personal data.

We may also share aggregated or anonymised information that does not directly identify individuals.

12. Security

COVEN takes appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, misuse or disclosure.

Access to personal data is limited to persons who need it for legitimate business purposes.

We also use security measures appropriate to the services we operate, including access controls and authentication mechanisms.

No internet transmission or storage system can be guaranteed to be completely secure.

13. Your Rights

Depending on the circumstances and applicable law, you may have the right to:

• Obtain access to your personal data
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data
• Request restriction of processing
• Object to processing based on legitimate interests
• Object at any time to direct marketing
• Withdraw consent where processing is based on consent
• Receive certain data in a structured, commonly used and machine-readable format where the right to data portability applies

Some rights may be subject to legal limitations.

To exercise your rights, contact us at:

contact ‘at’ wearecoven ‘dot’ com

We may need to verify your identity before processing a request.

We will respond without undue delay and, in principle, within one month of receiving your request, subject to the conditions and extensions permitted by applicable law.

You also have the right to lodge a complaint with the competent supervisory authority. In France, the supervisory authority is the Commission Nationale de l’Informatique et des Libertés (CNIL).

14. Children

Our games and services may be intended for different age groups depending on the product.

We do not knowingly collect personal data from children where doing so would be prohibited by applicable law.

Where we become aware that personal data have been collected in violation of applicable age or consent requirements, we will take appropriate steps to delete or otherwise handle that information in accordance with applicable law.

15. Links to Third-Party Websites

Our websites, games and communications may contain links to third-party websites, platforms or services.

COVEN is not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of those third parties before providing them with personal information.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technologies, legal obligations or data-processing practices.

The updated version will be published on this website with a new revision date.

Where appropriate, we may also provide additional notice of significant changes.

17. Contact

For questions concerning this Privacy Policy or the processing of your personal data, please contact:

COVEN SAS
14 rue du Moulin Joly
75011 Paris, France

Email: contact ‘at’ wearecoven ‘dot’ com