Skip to content

Privacy policy

Last updated: October 11, 2026

This page explains what personal data Memedex stores when you play, why, for how long, and how to exercise your rights. If anything is unclear, write to us.

The short version

  • You sign in with your Google account. Memedex never sees your password.
  • We store what the game needs to work: your username, your cards, your Buzzcoins and the history of your actions.
  • No advertising, no sale of data, no third-party tracking, no analytics cookies.
  • The game is for people aged 18 and over.
  • You can download all your data and delete your account yourself, in the application (Settings, Privacy and data). For any other request (correction, objection), write to contact@memedex.eu.

1. Who is responsible for your data?

Memedex is a collectible card game about internet culture, published by Rémi Valet. The publisher decides why and how your data is used: it is the data controller under the GDPR.

For any question about your data: contact@memedex.eu.

This policy covers the website memedex.eu and the game application it offers.

Memedex is in a test phase. With a signed-in account, the game features (Trios and Fives, results and leaderboards, friends, trades, referrals, notifications, Buzzcoin history) are stored on our servers. Without an account, the demonstration version runs on your device only.

2. The data we store

Your Google account

When you sign in with Google, the authentication service we use (Supabase) receives from Google an account identifier and the associated e-mail address, as well as the basic information of your Google profile (name and photo, depending on your account). It adds the account creation date, the date of your last sign-in and technical session data (IP address, browser).

The application does not display this information and does not use it for the game. We only use it to manage your account and answer your requests. We do not receive your Google password.

Your player profile

  • your username, which you choose (do not use your real name if you prefer to stay discreet);
  • the date on which you confirmed that you are 18 or older;
  • the version of the terms of use you accepted, and the date of that acceptance;
  • the date your profile was created and the date of your starter pack;
  • your profile badges (for example Founder Season 0);
  • your setting "Always keep one copy per rarity".

Your game data

  • your Buzzcoin balance and the log of every movement (amount, reason, date);
  • your boosters (received, opened, opening date) and the result of each opening, with its parameters so that it can be checked;
  • your cards: each copy has a number, and the history of its changes of owner is kept;
  • your resales of duplicates (card, amount, date).
  • your Trios and Fives (Daily Trio, Weekly Five), their results, your league and season rewards, your place in the leaderboards, your badges;
  • your friends and friend requests, your trade offers, your referrals (who invited you, whom you invited), your favorite cards, your avatar, your "offer resale at opening" setting and the in-app notices you have already seen;
  • your in-app notifications and the counters that limit how many times some actions can be done per hour.

On your device only

Some data never leaves your browser: your language and theme, your progress through the welcome steps, your interests, and everything you do in the demonstration version, without an account. See the section "Cookies and local storage".

What we do not collect

  • no payment method and no banking data: the application does not allow any purchase at this time;
  • no location, no contacts, no photos, no microphone and no camera;
  • no sensitive data under the GDPR (health, opinions, origin, etc.): we do not ask for it.

Your device's tilt or shake, if you allow it, is used only to animate the cards or open a booster on your screen: it is neither stored nor sent. If you write to us, we receive your e-mail address and the content of your message.

3. Why we use this data

Each piece of data serves a specific purpose, with the corresponding legal basis (GDPR, Article 6).

  • Signing you in and providing the game (account, profile, cards, Buzzcoins, boosters): performance of the terms of use you accept.
  • Keeping the game fair (fair booster openings, card ownership, detecting cheating and multiple accounts): legitimate interest of the publisher and of the players.
  • Keeping proof of your age declaration and of your acceptance of the terms: legitimate interest.
  • Keeping the service secure and working (hosting providers' technical logs, abuse prevention): legitimate interest.
  • Answering your messages and your requests to exercise your rights: legal obligation and legitimate interest.

We make no automated decision that has legal effects on you and we do not profile you. Booster contents are drawn at random by our servers.

4. Who receives your data?

We do not sell or rent your data. It is processed by the following technical providers, which may only use it to provide us with their service:

  • Supabase: database and authentication. The project is hosted in the Paris region (France, eu-west-3);
  • Vercel: hosting of the website and of the web application (application files, no database);
  • Google: sign-in to your account. Google processes your authentication under its own privacy policy.

Other players see your username and your avatar (player search, leaderboards, trade offers); your friends also see your cards, your badges and your closed Trios and Fives; a player you offer a trade to sees the cards of the offer. They never see your email address or your Google account.

We may disclose data to an authority if the law requires us to.

Some of these providers are companies established outside the European Union or may involve teams outside the Union. These transfers are covered by the safeguards provided for by the GDPR (adequacy decision or standard contractual clauses).

5. Cookies and local storage

Memedex uses no cookies. It uses no analytics tool, no advertising, and no tracker from social networks or any other third party. Fonts are served from our own files: loading them contacts no third-party service.

The application does, however, store data in your browser's local storage (localStorage and sessionStorage), which it needs to work:

  • your sign-in session, so that you stay signed in;
  • your language and theme preferences;
  • your progress, your avatar and the state of the demonstration version (for example in the key memedex-demo-v1);
  • the last booster reveal shown and your card-tilt choice.

This data is strictly necessary for the service you request: no consent is required and no cookie banner is shown. You can erase it at any time in your browser settings; you will then be signed out and your local preferences will be reset.

6. How long we keep it

We keep your data for as long as needed for the purpose for which it was collected.

  • Account and game data: as long as your account exists.
  • Inactive account: if you do not sign in for 24 months, your account is deleted or anonymised, like a requested deletion.
  • When you delete your account in the application, it is immediate and final: your sign-in account (email address, Google identifier), your username, your avatar, your friends, your requests, your pending offers, your referrals, your notifications and your place in the leaderboards are erased; your cards go back into the boosters and your balance is reset to zero. If you can no longer sign in, write to us: the deletion is done within 30 days.
  • Anonymised history: the log of card and Buzzcoin movements, and the results already played, are kept after deletion under a random identifier that no longer leads to you, because they guarantee the integrity of the game (copy numbers, number of copies of each edition, other players' leaderboards). They no longer identify you.
  • Database backup copies: erased when their retention period ends at our hosting provider (Supabase).
  • Messages you send us: for the time needed to handle your request, then for 12 months at most.
  • Technical logs of the hosting providers (Supabase, Vercel, Google): according to their own retention policies.

7. Your rights and how to exercise them

You have the right to:

  • access your data and obtain a copy of it;
  • have inaccurate data corrected;
  • ask for your data to be erased, that is, for your account to be deleted;
  • receive your data in a structured, machine-readable format (portability);
  • object to processing based on our legitimate interest, or ask for it to be restricted;
  • give instructions about what happens to your data after your death.

In the application, open Account, then Settings, then Privacy and data: "Download my data" gives you a JSON file of everything our servers record about your account, and "Delete my account" deletes it right away, for good (you type your username to confirm).

For a correction, an objection, or if you can no longer sign in, write to contact@memedex.eu from the email address of your Google account.

We reply within one month. To protect your account, we may ask you to confirm your identity.

If you believe your rights are not being respected, you can contact the CNIL (cnil.fr, France) or the data protection authority of your country of residence.

8. A game for adults

Memedex is for people aged 18 and over. By signing in, you confirm that you are 18 or older; we store the date of this confirmation.

We do not ask for an identity document. If we learn that an account belongs to a person under 18, we delete it. If you think a minor is using Memedex, write to us.

9. Buzzcoins and payments

Buzzcoins are the game's virtual currency. They have no real value, cannot be withdrawn and cannot be converted into money.

At this time it is not possible to buy Buzzcoins or to pay for anything in Memedex: we therefore collect no payment data. If buying Buzzcoins ever opens, this page will be updated beforehand, naming the payment provider concerned.

10. Measurement and error logs (planned)

Nothing below is in service today. To fix errors and know whether the game works, we plan to record technical events (for example a booster being opened or a screen error) and, if you use "Report a problem", the content of your report together with the screen concerned, the time and the application version.

These events would be linked to your player identifier (a string of characters), not to your name or your e-mail address. Detailed events would be deleted after 180 days; only totals with no link to you would be kept. We will not add an analytics tool or a third-party error-tracking service without updating this page.

11. Security

Game data is stored in a database whose tables cannot be reached directly from your browser: the application can only ask our servers to perform specific actions (open a booster, resell a card), which check your rights. Booster contents, cards and Buzzcoins are handled by the server, never by the application. Exchanges with our servers are encrypted (HTTPS).

No system is infallible: in the event of a data breach that poses a risk to you, we will tell you and we will notify the CNIL within the legal deadlines.

12. Changes to this policy

We update this page when the game or the way we process data changes. The date of the last update is shown at the top of the page. If a change is significant, we will tell you in the application.

13. Contact us