Privacy policy

Everything you record is private by default. Nothing becomes public without a gesture of yours, and your purchase price, private notes and personal photos never are. There is no advertising, no profiling and no analytics tool, and your data is never sold.

The controller of your data is Pierre-Louis Adam, entrepreneur individuel (EI), trading as Breakloop Studio, 173 rue de Courcelles, 75017 Paris, France. Contact: fidgets@breakloop.fr.

Your account: your email address. If you sign in with Google, Google gives us your email address, your name and your profile picture; we use only the email address, and never show the name or the picture.

What you enter: your fidgets (model, edition, material, finish, nickname, status, private note, purchase date and price), your personal photos, your setups and their parts, your parts stock, your handle, the setups you like, the reports you make, and the fidgets you suggest for the catalog (brand, name, and the link and note you choose to add).

Technical data: our hosting providers keep short-lived logs of requests (address of the device, browser, time) for security and to keep the service running. When the app fails, an error report is sent to our error-reporting service: what failed and on which page, without your name, email address or content.

To provide the service you signed up for: keeping your account, your collection and your setups, and showing what you choose to publish (performance of a contract).

To keep the service safe and working: preventing abuse, moderating reported content, fixing errors, and making weekly backups (legitimate interest).

We do not use your data for advertising, profiling or any purpose other than these.

Private: your collection, purchase details, private notes, nicknames, personal photos, parts stock, the setups you have not published, and your suggestions for the catalog.

Public, only once you publish a setup: that setup (its name, note, tags, parts, video link, the material and finish of the fidget it was recorded on), your handle and its number of likes. Anyone can see it, and signed-in users can copy it into their own collection; a copy stays with them even if you unpublish or delete yours.

Supabase Pte. Ltd. (database, sign-in and file storage; servers in Paris, France (European Union)); Vercel Inc. (hosting of the site); Brevo (sending sign-in emails; France; to watch that they arrive, it counts how often they are opened and their link followed, without linking these counts to anyone); Google (sign-in with Google, only if you use it); Sentry (error reports; servers in the European Union). Each processes data only to provide its service to us.

Some of these companies are based outside the European Union. Where your data leaves it, they rely on the safeguards provided by European law, such as the European Commission's standard contractual clauses.

Your account and what you recorded: until you delete your account. Deletion is immediate and permanent.

Backups: a deleted account may remain in our weekly backups for up to 5 weeks, after which it is gone.

Error reports: up to 90 days. Hosting logs: the short periods set by our providers.

Reports you made about someone else's setup stay after your account is deleted, without any link to you.

We use no advertising or tracking cookies. Your browser stores only what the site needs: your session, so you stay signed in, and your language choice. No consent banner is needed for these.

From your account page, at any time, you can see and correct what you recorded, export your data, and delete your account and everything in it. To change the email address of your account, write to fidgets@breakloop.fr. You also have the right to object to or restrict processing based on legitimate interest, and to data portability.

For anything else, write to fidgets@breakloop.fr: we answer within one month. If you think your rights are not respected, you can complain to the CNIL (www.cnil.fr), the French data protection authority.

Fidget Setups is for people aged 16 and over.

If this policy changes in substance, the date above changes and you are asked to read and accept it again the next time you sign in.