The GachaLoot archive

Privacy Policy

Last updated: September 18, 2026

01. Data controller

GachaLoot is operated by an independent publisher based in France. Information about the site operator and host is available in our Legal Notice.

02. Data we may process

Technical logs and security

Our infrastructure and security providers may process IP address, request date and time, requested page, browser information and security events to operate and protect the website.

Audience measurement

Google Analytics 4 may process page views, approximate location derived from IP, browser/device information and interaction data to understand site usage and improve GachaLoot.

Advertising

When Google AdSense is enabled, Google and its partners may process advertising identifiers, cookies and information about ad delivery or interaction, subject to the choices and controls available through Google and your browser.

Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this or other websites. You can manage personalised advertising through Google's Ads Settings and review Google's advertising technology information.

Messages and service email

If you contact us or opt into a future email service, we process the information you provide and delivery records in order to respond or deliver that service.

03. Purposes and legal bases

  • Legitimate interests: website operation, security, abuse prevention and technical diagnostics.
  • Consent where required: analytics and advertising technologies.
  • Performance of a requested service: answering messages or delivering an email service you requested.

04. Service providers

  • OVH SAS — website hosting in France. Privacy information
  • Cloudflare — DNS, performance and website security services.
  • Supabase — database and administrator authentication services.
  • Google — Google Analytics and, when enabled, Google AdSense. Privacy Policy
  • Zoho / ZeptoMail — transactional email delivery when email features are enabled. Privacy Policy

05. Retention and transfers

We retain data only for as long as needed for the purposes above. Technical logs are retained for a limited security period; analytics retention follows the period configured in Google Analytics; and contact information is kept for the time needed to handle the request. Some providers, including Google and Zoho, may process data outside the European Economic Area using applicable transfer safeguards.

06. Your rights

You may request access, rectification, erasure, restriction, portability or objection where applicable, and withdraw consent at any time. You may also lodge a complaint with the French data-protection authority, the CNIL.

For more information about the website operator, read our Legal Notice.