Privacy Policy

We collect an email address, a display name and a password hash from people who register. That is the entire set of personal data we ask for. We do not run advertising trackers, we do not sell data, we do not build profiles, and we have no payment system, so we never see a card number, a bank detail or a billing address.

• Email address — it identifies your account at login and is the only way we can reach you about it. Legal basis: performance of our agreement with you.
• Display name — how the site greets you. Use a nickname if you prefer.
• Password — stored only as a scrypt hash with a per-account random salt. The password itself is never written to disk and cannot be read back by us.
• Coin balance and bonus timestamp — the state of your free virtual balance and when you last claimed a daily top-up.
• Server logs — our web server records IP address, timestamp, requested page and browser user agent for security and troubleshooting. Legal basis: our legitimate interest in keeping the site available and abuse-free.

Guests who play without registering create no account record at all.

We set one cookie, a signed session token, when you log in. It keeps you logged in and does nothing else. We also store your age confirmation locally in your browser so the 18+ prompt is not repeated on every visit — that never reaches our servers. Full detail is in the Cookie Policy.

Game frames are loaded directly from the game provider's demo service, and cover images from its image host. When a game loads, your browser contacts that provider and it will see your IP address and browser details, as it would for any embedded content. We pass it no account information — it does not receive your email address, display name or coin balance, and we receive no personal data back from it.

Web fonts are served from our own domain, so no font provider is contacted while you browse.

Account data lives for as long as your account does, plus a short window after deletion while backups roll over. Server logs are kept for a limited period for security purposes and then discarded. Ask us to delete your account and the record is removed.

The site is served over HTTPS. Passwords are hashed with scrypt. Session cookies are HTTP-only, marked secure, and cryptographically signed so they cannot be forged or edited. Account data sits in a database that is not reachable from the public internet. No system is perfect, but there is deliberately very little here worth stealing.

Under the GDPR and French data protection law you may request access to your data, correction of it, deletion of it, a portable copy, restriction of processing, or object to processing based on legitimate interests. Email [email protected] and we will respond within one month. You also have the right to complain to your national data protection authority — in France, the CNIL.

Crimson Inferno is strictly for adults aged 18 and over and is not directed at children. If you believe a child has registered, contact us and we will delete the account and its data promptly.

Material changes to this policy will be reflected in the date at the top of the page. Write to [email protected] or AUTO-ECOLE GK ROULER 06, 143 Avenue Porte des Alpes, 06670 Levens, France with any question about your data.