Privacy policy
The game collects nothing. The site collects very little. Here is exactly what, why, and what you can do about it.
In effect since November 4, 2026
In short
- The Caravita game has no account, does not connect to the internet and sends me no information.
- The site uses no advertising cookies. Google Analytics stays off until you say yes.
- I do not sell personal information and I do not use advertising.
- I never see your card number.
Who is responsible?
Caravita is made by one person: me, Elyse Giroux, in Sherbrooke, Quebec, Canada.
I am also the person in charge of the protection of personal information. For any question or request, write to me at caravita@elysegiroux.com.
What is collected, and why?
| When | What | Why | How |
|---|---|---|---|
| You visit the site | IP address, browser and device type, page requested, date and time | To show the site and protect it from abuse | Technical logs at the host, Cloudflare |
| You accept analytics | Pages viewed, length of visit, where you came from, device type, approximate region, an online identifier stored in a cookie | To learn which pages are useful and improve the site | Google Analytics |
| You buy the game on this site | Name, email, billing address, country, product, amount. Payment details go only to Lemon Squeezy. | To process the order, deliver the game, collect taxes, handle a refund and answer questions | The Lemon Squeezy checkout |
| You write to me | Your email address and what you write | To answer you |
Your preferences (theme, sound, language) stay in your browser and are never sent to me.
If you buy on the App Store, Google Play or Steam, that store collects your information under its own policy. I do not receive your name.
You can say no
- Analytics: off by default, because they can be used to analyse your behaviour on the site. To turn them on, choose “Accept” in the cookie message. If you decline, the site works exactly the same.
- Buying: without the order details I cannot sell you the game on this site. You can also buy it in a store, once it is available there.
- Email: you never have to write to me in order to play.
You can withdraw your consent to analytics at any time on the Cookies page.
Who has access?
Only me, and the providers below, who need it to run the site. They are outside Quebec, mainly in the United States.
| Provider | Role | Information | Its policy |
|---|---|---|---|
| Cloudflare, Inc. | Hosts the site | Technical logs | Read |
| Google LLC | Analytics, only if you accept | Analytics data | Read |
| Lemon Squeezy (Link, LLC) | Official seller of purchases made on this site | Order and payment details | Read |
| My email provider | Receives and stores email | Your address and message | On request |
How long I keep it
| Information | How long |
|---|---|
| Analytics data in Google Analytics | 2 months |
| Google Analytics cookies in your browser | 13 months at most, or until you withdraw consent |
| Your cookie choice, in your browser | 12 months, then I ask again |
| Order details | 6 years after the tax year, as tax rules require |
| 2 years after our last exchange, or 6 years if it concerns a purchase | |
| Technical logs | The short period set by the host |
After that, I destroy the information or make it anonymous.
Your rights
- To know what information I hold about you, to access it and to get a copy, including in a common technological format.
- To have it corrected if it is inaccurate, incomplete or equivocal.
- To withdraw your consent.
- To ask me to stop disseminating information or to de-index a hyperlink, in the cases the law provides.
- To make a complaint.
Write to me at caravita@elysegiroux.com. I answer in writing within 30 days. It is free, and I can help you word your request.
If you are not satisfied with my answer, you can contact Quebec’s Commission d’accès à l’information: cai.gouv.qc.ca, 1 888 528-7741.
Children
The site is not aimed at children in particular. Anyone under 14 must ask a parent or tutor before accepting analytics, writing to me or buying. If a child has sent me information without that permission, write to me and I will delete it.
How I protect it
- The site is served only over an encrypted connection.
- My accounts are protected by unique passwords and two-factor authentication.
- I collect only what is needed, and I keep no card data.
If a confidentiality incident presents a risk of serious injury, I promptly notify the people affected and the Commission d’accès à l’information.
If this policy changes
The date at the top shows the latest update. If I change something important, I announce it on the site, and I ask for your consent again if a new use requires it.