Privacy Policy

This Privacy Policy is intended to inform users of the Atlas Tutti application about how their personal data is collected, used, stored, and protected.

Particular importance is given to the protection of privacy and the processing of personal data in accordance with applicable regulations.

The data controller for the personal data collected through Atlas Tutti is Atlas Tutti.

For any questions regarding the protection of personal data or to exercise your rights, you may use the contact form available at the following address:

https://atlastutti.com/#contact

Depending on how the Application is used, the following data may be collected.

3.1 Identification and Account Data

• email address;
• first name;
• last name;
• display name;
• country;
• year of birth;
• gender;
• user identifier;
• selected avatar;
• password, stored in a secure form when email-based authentication is used.

3.2 Technical Data

• technical identifiers necessary for the operation of the service;
• session tokens;
• platform used;
• Application version;
• IP address processed for security, abuse prevention, and proper operation of the service;
• data necessary for connection, technical compatibility, and protection of the service.

3.3 Game-Related Data

• Elo ranking;
• weekly points;
• grade, level, progression, and experience;
• trophies, honor, and salon progression;
• game statistics;
• match history and associated metadata;
• virtual token balance;
• daily bonus timestamps;
• data relating to friends, blocks, and reports.

3.4 Support and Security Data

• information provided in support requests;
• technical logs;
• information relating to errors, crashes, or incidents;
• reasons for sanctions or bans, where applicable.

Personal data is processed for the following purposes:

• creating, managing, and securing user accounts;
• authenticating users;
• providing access to multiplayer games;
• managing matchmaking, rankings, progression, and match history;
• allocating and managing virtual tokens and bonuses;
• ensuring the security of the Application and preventing fraud, abuse, and mass account creation;
• providing assistance and responding to support requests;
• sending transactional emails, including verification or account recovery emails;
• detecting, logging, and correcting technical errors;
• complying with applicable legal and regulatory obligations;
• enabling users to exercise their rights.

Depending on the processing concerned, data is processed on one or more of the following legal bases:

• performance of the service, in particular for account creation, login, access to the game, progression, rankings, match management, and token management;
• legitimate interest related to security, fraud prevention, moderation, abuse management, error correction, and defense of rights;
• compliance with legal obligations where retention is required for accounting, tax, evidentiary, or compliance purposes;
• consent, where required by applicable regulations.

Certain data is necessary for the operation of the service and the creation of an account depending on the authentication method used.

Failure to provide certain mandatory data may prevent the user from:

• creating an account;
• securing their access;
• accessing certain features;
• or using the Application under normal conditions.

When an anonymous account is used, certain personally identifiable data may not be required.

Personal data is accessible, within the limits of their respective roles, to:

• authorized persons responsible for operating and administering the service;
• authorized technical service providers involved in the operation, security, support, or delivery of the service;
• distribution or payment platforms concerned for in-app transactions;
• competent authorities, where required by law.

The Application or its technical environment may rely on third-party services necessary for its operation, in particular for:

• sending transactional emails;
• detecting and tracking technical errors;
• protection against abuse and automated actions on the web;
• validation of in-app purchases;
• provision and security of technical infrastructure.

These services are not intended to publicly disclose the internal architecture of the service beyond what is necessary to inform users.

The Application does not use mobile advertising tracking and does not employ tracking mechanisms intended to display targeted advertising within the Application.

The Application does not currently incorporate any processing intended for advertising profiling within the mobile Application.

Unless a future change is expressly communicated, Atlas Tutti does not collect, within the mobile Application:

• precise geolocation;
• photos, videos, or content from the camera;
• files uploaded by the user;
• free-form messages between players;
• push notifications;
• advertising tracking cookies;
• user-generated content other than certain profile elements such as the display name.

Data is retained for a period not exceeding that necessary for the purposes for which it is processed.

As a general guideline:

• account data is retained for the entire duration of the active account;
• when account deletion is requested, the account is placed in a grace period of 30 days before permanent deletion or anonymization, unless required by law or for security purposes;
• technical logs, security elements, and information necessary for fraud prevention may be retained for a reasonable period necessary for security, incident investigation, and defense of rights;
• data related to a transaction may be retained for the period required by legal, accounting, or evidentiary obligations;
• support requests may be retained for the period necessary for their processing and then archived if necessary in the event of a dispute.

Data is hosted on technical infrastructure operated for the functioning of the service, directly or through authorized technical service providers.

Limited local storage may be used on the user's device to enable, in particular, session maintenance, authentication, or certain technical functions necessary for the proper operation of the Application.

Appropriate technical and organizational measures are implemented to protect personal data against destruction, loss, alteration, unauthorized disclosure, or unlawful access.

These measures include, as applicable:

• the use of secure communications;
• secure storage of certain session elements;
• access protection;
• account verification mechanisms;
• measures to prevent abuse, fraud, and unauthorized access.

However, as no security measure provides an absolute guarantee, the user acknowledges that zero risk does not exist in the transmission or storage of data.

Certain technical service providers or platforms may process data from countries other than the user's country of residence.

Where applicable, appropriate safeguards are implemented in accordance with applicable regulations.

Subject to the conditions provided by applicable regulations, the user has the following rights:

• right of access;
• right to rectification;
• right to erasure;
• right to restriction of processing;
• right to object, where applicable;
• right to data portability, where applicable;
• right to withdraw consent where processing is based thereon.

The user may exercise their rights via the contact form available at the following address:

https://atlastutti.com/#contact

Reasonable proof of identity may be requested where necessary to process the request securely.

The user may request the deletion of their account directly from the Application or through the means made available on the official website.

The request results in the deactivation of the account, followed by a grace period of 30 days during which the user may reverse their decision if this feature is available.

At the end of this period, account data is deleted or anonymized, except where retention remains necessary:

• for compliance with a legal obligation;
• for fraud prevention;
• for the establishment, exercise, or defense of legal claims;
• for the security of the platform.

Atlas Tutti is not intended for children under 13 years of age.

If an account is created in violation of this rule, appropriate measures may be taken, including the suspension or deletion of the account concerned.

This Privacy Policy may be amended at any time to reflect changes to the Application, its features, its processing activities, or applicable regulations.

The version in effect is the one published on the official website or made accessible from the Application.

For any questions regarding this Privacy Policy or the processing of personal data, you may use the contact form available at the following address:

https://atlastutti.com/#contact