Privacy

I am Christophe Dugne-Esquevin, and I run Uralys: a one-person independent studio in France making games, websites and music. This page covers uralys.com and every game or app published under the Uralys name, on Steam, itch.io, the App Store and Google Play. Uralys is the data controller for everything described here; write to me at hello [at] uralys.com about any of it.

The short version

  • No account, no sign-up, no newsletter and no login, anywhere
  • No advertising, no ad tracking, no profiling, nothing sold
  • No cookies of my own, and no analytics tool
  • Some pages embed fonts and players from Google, YouTube, Spotify and SoundCloud, which see your IP address
  • Leaderboards store a display name you choose and a score, nothing else

When you simply visit this site

uralys.com is a static site hosted on Amazon Web Services: S3 and CloudFront, Paris region (eu-west-3). Like any web host, AWS records technical connection data in server logs: IP address, date and time, page requested, browser and operating system. Those logs exist to serve the site and spot abuse. They are kept briefly and never used to build a profile of you.

Legal basis: legitimate interest in serving and securing the site (GDPR Art. 6.1.f).


Cookies, and what stays in your browser

uralys.com sets no cookies of its own: none for analytics, none for advertising, none for preferences.

One page uses your browser's local storage: the Undercover party game keeps the current round, the player names you type and the running scores on your own device, so a game survives a reload. None of that ever leaves your browser. Clear it from the game itself, or by clearing site data for uralys.com.

The third-party players embedded on some pages do load with the page, and may set their own cookies at that moment. They are listed below.


Third-party content on these pages

Some pages load content from other companies. Your browser contacts them directly, so they receive your IP address and possibly more, under their own policies. Those requests may reach servers outside the European Union, covered by standard contractual clauses or the EU–US Data Privacy Framework. None of them report anything back to me.


Measuring page speed

Loading speed is measured inside your own browser (Core Web Vitals). Today those numbers are sent nowhere and stored nowhere. If I ever connect a real analytics tool, I will update this page before doing so, and ask for your consent first if that tool uses cookies or any similar identifier.

The site also carries a Google Search Console verification tag. It sets no cookie; it lets me see aggregate statistics about how the site appears in search results.


Leaderboards in Uralys games

Some games, Faraday Corridors among them, let you submit a score to an online leaderboard, and the Hall of Fame tables on this site read from it. Here is everything that is sent when you do:

  • a display name you choose: anything you like, and a pseudonym is the right answer
  • your score, and which board it belongs to
  • an identifier generated on your device, so your own best score is updated instead of duplicated
  • the date of the submission

Never sent: your name, your email address, your location, your contacts, your advertising identifier, or anything else from your device.

Scores live on a Uralys service (leaderboard.uralys.com) hosted on AWS in Europe, and the display name and score are shown publicly. That is pseudonymous data, not anonymous. That is why this page treats it as personal data.

Legal basis: your consent, given by choosing to submit. Play offline, submit nothing, and nothing leaves the game. Entries stay while the leaderboard is live; email hello [at] uralys.com with the display name and the game, and I will delete yours.


Games bought through a store

When you buy or install a Uralys game through Steam, the App Store, Google Play or itch.io, that store is its own data controller: it handles the purchase, the account, playtime, crash reports and refunds under its own policy. I only ever see aggregate figures (sales, wishlists, country breakdowns), never an individual player.

Uralys games themselves contain no advertising, no ad SDK, no third-party tracker and no location tracking.


If you write to me

I keep your address and your message for as long as it takes to answer and to keep a sensible record: three years at most for a business enquiry. Your address is never added to a mailing list, because there is no mailing list.

Legal basis: legitimate interest in replying to you (GDPR Art. 6.1.f).


Your rights

Under the GDPR you can ask me, at any time, to:

  • confirm what I hold about you and give you a copy (access)
  • correct anything inaccurate (rectification)
  • delete it (erasure)
  • restrict or object to how it is used
  • hand it over in a portable format (portability)
  • withdraw a consent you gave earlier, without affecting what was done before

Write to hello [at] uralys.com. I answer within a month. There is no account system, so I may need one detail to find the right record: for a leaderboard entry, the display name and the game are enough.

If you think a request was mishandled, you can lodge a complaint with the French data protection authority, the CNIL: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, cnil.fr.


Children

Uralys games and this site are not directed at children under 15, and I do not knowingly collect anything from them. The only thing a player ever types is a leaderboard display name, and nobody should type a real name there. If you are a parent and a name identifying your child appears on a leaderboard, email hello [at] uralys.com and I will remove it.


Automated decisions

There is no profiling and no automated decision-making of any kind, in the games or on this site.


Changes to this page

This page is versioned with the website's source code. Any meaningful change is published here and the date below is updated. If a change ever affects data already collected, I will say so plainly rather than quietly editing the text.

Last updated 2026-09-04