Privacy policy

Data controller

The data controller is:

Ryan Mazzitelli
3 rue de la porte de la brède, 09700 Saverdun, France
Email: devmazzitelli@gmail.com

Data collected

When using the BOD Universe service, the following personal data is collected:

• Email address (upon registration)
• Password (stored in encrypted form)
• Game screenshots (sent for AI analysis during scans)
• Scan configuration settings (zone coordinates)
• Transaction data (amount, Stripe identifier, status)

Purpose of data processing

• Creation and management of your user account
• Providing the AI image analysis service
• Processing payments and managing credits
• Service improvement (scan log analysis)

Legal basis

• Contract performance: your data is necessary to provide the service you subscribed to
• Legitimate interest: service improvement and anomaly detection

Data retention

Your personal data (account, email) is retained as long as your account is active. Scan logs (screenshots and analysis results) are retained indefinitely for service improvement purposes. You may request the deletion of your account and data at any time by contacting us via email.

Sub-processors and data transfers

Your data may be shared with the following service providers, necessary for the operation of the service:

• <strong>Stripe</strong> (online payment) — Payment data is processed directly by Stripe. BOD Universe does not store any credit card numbers. Privacy policy: stripe.com/privacy
• <strong>Anthropic</strong> (AI analysis) — Screenshots are sent to Anthropic's Claude API for analysis. These images do not contain personally identifiable data. Privacy policy: anthropic.com/privacy
• <strong>OVH</strong> (hosting) — Data is hosted in France by OVH SAS

Cookies

The website only uses a technical session cookie, strictly necessary for the service to function (authentication). No tracking, advertising or analytics cookies are used. This session cookie does not require consent under applicable regulations.

Your rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access: obtain a copy of your personal data
• Right to rectification: correct inaccurate data
• Right to erasure: request the deletion of your data
• Right to data portability: receive your data in a structured format
• Right to object: object to the processing of your data

To exercise these rights, contact us at: devmazzitelli@gmail.com

You also have the right to lodge a complaint with the CNIL (French Data Protection Authority) — www.cnil.fr

Data security

We implement appropriate technical and organizational measures to protect your personal data: password encryption, secure API token authentication, HTTPS connection, hosting in France.

Policy changes

This privacy policy may be updated at any time. The last update date is shown at the top of this page. We encourage you to review it regularly.

Contact

For any questions regarding this privacy policy or your personal data:

Ryan Mazzitelli
Email: devmazzitelli@gmail.com