This privacy policy is published in French, which is the authoritative version for legal purposes. For any question regarding your personal data, contact us at hello@postmeridian.co.
Privacy Policy
Website & online services â Version 1.1, June 10, 2026
POSTMERIDIAN, independent video game studio
| Legal framework | Territory | Reference text |
|---|---|---|
| GDPR | European Union / France | EU Reg. 2016/679 + French Data Protection Act |
| PIPEDA | Canada (federal) | Personal Information Protection and Electronic Documents Act |
| Law 25 | Quebec | Act to modernize legislative provisions respecting the protection of personal information |
1. Data Controller Identity
This website and its associated services are operated by:
| Company name | POSTMERIDIAN |
| Legal form | SARL (France) |
| Registered office | 1 chemin de la Gardie, 34170 Castelnau-le-Lez |
| SIRET number | 930 658 836 00018 |
| VAT | TVA non applicable, art. 293 B du CGI (franchise en base) |
| Publication director | Florian Charléty, co-gérant |
| Email address (data protection) | hello@postmeridian.co |
| Person responsible for personal information protection (Law 25, QC) | Hugo Pezzo, co-gĂ©rant â hello@postmeridian.co |
| Country of main establishment | France |
2. Personal Data Collected
2.1 Data you provide directly
| Category | Examples | Collection context |
|---|---|---|
| Identification | First name, last name, pseudonym | Newsletter signup, contact form, Kickstarter pre-registration |
| Contact details | Email address | Newsletter, contact form |
| Communication data | Messages, feedback, suggestions | Contact form, Discord, social media |
| Payment data | No direct collection: payments are processed exclusively by Kickstarter (see their policy) | Kickstarter campaign via the Kickstarter platform |
| Preferences | Language, preferred gaming platforms | Optional forms |
2.2 Data collected automatically
| Category | Data | Tool / Method |
|---|---|---|
| Browsing | Pages visited, session duration | Vercel Analytics (cookie-less audience measurement, enabled only after consent) |
| Technical | IP address, browser type, operating system | Server logs (Vercel hosting) |
| Approximate location | Country/region (via IP) | Anonymized analytics |
3. Legal Bases for Processing
In accordance with the GDPR (Art. 6) and Quebec's Law 25, each processing operation is based on an identified legal basis:
| Processing purpose | Legal basis (GDPR) | Legal basis (PIPEDA / Law 25) | Data concerned |
|---|---|---|---|
| Newsletter sending | Consent (Art. 6.1.a) | Express consent | Email, first name |
| Response to contact requests | Legitimate interest (Art. 6.1.f) | Purpose for which the information was provided (compatible use) | Email, name, message |
| Site improvement (analytics) | Consent (Art. 6.1.a) or legitimate interest if exempt from consent (CNIL) | Consent (Law 25 â disabled by default, Art. 8.1) | IP, browsing behavior |
| Kickstarter pre-registration list management | Consent (Art. 6.1.a) | Express consent | Email, first name |
| Legal and accounting obligations | Legal obligation (Art. 6.1.c) | Legal obligation | Billing data where applicable |
| Security and fraud prevention | Legitimate interest (Art. 6.1.f) | Legitimate purpose | Logs, IP |
4. Retention Periods
| Data category | Active retention period | Archiving period / Legal basis |
|---|---|---|
| Newsletter / pre-registration data | Until unsubscription, or 3 years after the last active contact | CNIL prospect doctrine; after unsubscription, only the email is kept in a suppression list |
| Contact data / messages | 3 years after the last contact | Civil statute of limitations (France) / 2 years (QC, Civil Code) |
| Connection logs and IP | Retained by our host (Vercel) according to their retention policy | Security and legal obligations applicable to the host |
| Anonymized analytics data | Rolling 25 months (CNIL) | Aggregated statistics retained indefinitely |
| Billing data (if applicable) | 10 years | Commercial Code (France) / Tax law (Canada) |
| Consent choices (cookies) | 6 months | CNIL recommendation / Access to Information Commission (QC) |
5. Recipients and Sub-processors
POSTMERIDIAN does not sell your personal data to third parties. As part of operating the site and its services, certain technical providers may access your data as sub-processors:
| Provider category | Provider | Hosting country | Safeguards |
|---|---|---|---|
| Web hosting | Vercel Inc. | USA (CDN mondial) | Data Privacy Framework + CCT (DPA Vercel) |
| Email / newsletter | Brevo (Sendinblue SAS) | France / UE | RGPD natif (hébergement UE, DPA Brevo) |
| Email (contact inbox) | Google Workspace (Google LLC / Google Ireland) | USA / UE | Data Privacy Framework + DPA Google |
| Analytics | Vercel Analytics & Speed Insights (Vercel Inc.) | USA (CDN mondial) | Data Privacy Framework + DPA Vercel â mesure d'audience sans cookies, activĂ©e aprĂšs consentement |
| Payments (Kickstarter) | Kickstarter PBC | USA | Politique de confidentialité Kickstarter |
| Internal content management | Notion Labs Inc. | USA | CCT / DPA Notion (Data Privacy Framework) |
| Support & community | Discord Inc. | USA | CCT / Data Privacy Framework |
| Press downloads (press kit) | Cloudflare Inc. (R2) | USA (CDN mondial) | Data Privacy Framework + DPA Cloudflare |
6. Your Rights
6.1 Rights recognized under the GDPR (EU / France residents)
| Right | Description | Response time |
|---|---|---|
| Access (Art. 15) | Obtain a copy of your processed data | 1 month (extendable to 3 months) |
| Rectification (Art. 16) | Correct inaccurate or incomplete data | 1 month |
| Erasure (Art. 17) | Obtain deletion of your data ("right to be forgotten") | 1 month |
| Restriction (Art. 18) | Temporarily suspend processing | 1 month |
| Portability (Art. 20) | Receive your data in a structured, readable format | 1 month |
| Objection (Art. 21) | Object to processing based on legitimate interest | Reasonable time |
| Withdrawal of consent | Withdraw your consent at any time, without retroactive effect | Immediate |
| Post-mortem directives (Art. 85 French Data Protection Act) | Define the fate of your data after your death (retention, erasure, communication) | 1 month |
| Complaint | File a complaint with the CNIL (www.cnil.fr) if you believe your rights have been violated | â |
We do not make any decision producing legal effects concerning you based solely on automated processing, including profiling (GDPR, Art. 22; Law 25, Art. 12.1).
6.2 Rights recognized under PIPEDA and Law 25 (Canadian / Quebec residents)
| Right | Description | Response time |
|---|---|---|
| Access | Consult information about you and its use | 30 days (PIPEDA) / 30 days (Law 25) |
| Rectification | Have inaccurate or incomplete information corrected | 30 days |
| Withdrawal of consent | Withdraw your consent (subject to legal/contractual constraints) | Reasonable |
| Portability (Law 25, Art. 27) | Receive your data in a structured, commonly used technological format (in force since September 22, 2024) | Reasonable |
| De-indexation (Law 25, Art. 28.1) | Request cessation of dissemination / de-indexation in certain cases | Reasonable |
| Complaint â OPC | File a complaint with the Office of the Privacy Commissioner of Canada | â |
| Complaint â CAI (QC) | File a complaint with the Commission d'accĂšs Ă l'information du QuĂ©bec | â |
To exercise your rights, contact us at: hello@postmeridian.co or by mail at the registered office address.
We may ask you to provide proof of identity before processing your request.
7. Cookies and Trackers
Our site may use cookies and similar technologies (including your browser's local storage). The table below details the categories used:
| Element | Purpose | Duration | Consent required? |
|---|---|---|---|
| Language cookie (next-intl) | Remember chosen language (FR/EN) | Browsing session | No â strictly necessary for a requested service (CNIL exemption) |
| Consent choice (local storage) | Remember your cookie preferences to avoid asking on each visit | 6 months, then the banner is displayed again | No â storing the choice is exempt |
| Newsletter preferences (local storage) | Do not show the signup widget if you are already subscribed | Until manual deletion (non-personal data) | No â functional preference |
| Contact form draft (local storage) | Restore a message being drafted (email address is never stored) | 5 minutes | No â explicitly requested service |
| Audience measurement (Vercel Analytics & Speed Insights) | Anonymous traffic statistics and site performance | No storage on your device (cookie-less technology) | Yes â disabled by default, enabled only after your consent via the banner |
| Third-party content (embedded YouTube videos) | Playing presentation videos | Variable (cookies set by YouTube) | Yes â consent by action: no YouTube resources are loaded before you click on the video |
In accordance with Law 25 (Art. 8.1), any technology that can identify you, locate you, or perform profiling is disabled by default; you are informed of the means to activate it.
You can modify your preferences at any time via the "Cookie Settings" link in the site footer, or through your browser settings. Withdrawal of your consent takes effect immediately.
8. Minors
Our services are not intended for children. We do not knowingly collect personal data from minors under:
- 15 ans â 15 years for French residents (Art. 45 of the French Data Protection Act) â below this age, joint consent of the minor and the holder of parental authority is required;
- 14 ans â 14 years for Quebec residents (Law 25, Art. 4.1) â below this age, consent must be given by the holder of parental authority or the guardian, unless the collection is clearly for the minor's benefit.
If you are a parent or guardian and find that a minor under your responsibility has provided us with data without the required authorization, contact us at hello@postmeridian.co so that we can proceed with its deletion.
9. Data Security
POSTMERIDIAN implements appropriate technical and organizational measures to protect your data against unauthorized access, loss, destruction, or accidental disclosure, including:
- Communications encryption (HTTPS / TLS 1.2+)
- Data access restricted to authorized persons based on the principle of least privilege
- Hosting on Vercel infrastructure (SOC 2 Type II certified, ISO 27001)
- Password policy and two-factor authentication for internal access
- Access monitoring and logging
In the event of a data breach likely to pose a risk to your rights and freedoms, we will notify:
- The competent supervisory authority within 72 hours (GDPR, Art. 33)
- The data subjects without undue delay if the risk is high (GDPR, Art. 34)
- The Office of the Privacy Commissioner of Canada if applicable (PIPEDA)
- The Commission d'accÚs à l'information du Québec if applicable (Law 25)
10. International Data Transfers
As part of using third-party providers (see section 5), your data may be transferred to countries located outside the European Union or Quebec.
We govern these transfers through the following mechanisms:
- Standard Contractual Clauses (SCC) approved by the European Commission
- European Commission adequacy decisions (where applicable)
- Privacy impact assessments (PIA) for transfers outside Quebec (Law 25, Art. 17)
11. Changes to This Policy
We reserve the right to modify this Privacy Policy at any time to adapt to legal, regulatory, or practice changes.
In the event of a substantial change, we will inform you:
- By email if you are subscribed to our newsletter
- By a visible notification on the site during your next visit
- By updating the version date at the top of this document
We encourage you to regularly review this page. When a substantial change affects processing based on your consent, we will seek your consent again before applying the new practices.
12. Contact & Complaints
| Questions about this policy | hello@postmeridian.co |
| Exercising your rights | hello@postmeridian.co |
| Postal mail | POSTMERIDIAN â 1 chemin de la Gardie, 34170 Castelnau-le-Lez |
| French authority (CNIL) | www.cnil.fr â 3 place de Fontenoy, 75007 Paris |
| Privacy Commissioner of Canada (OPC) | www.priv.gc.ca â 30, rue Victoria, Gatineau QC K1A 1H3 |
| Commission d'accĂšs Ă l'information du QuĂ©bec (CAI) | www.cai.gouv.qc.ca â 525, boul. RenĂ©-LĂ©vesque Est, QuĂ©bec QC G1R 5S9 |
POSTMERIDIAN | postmeridian.co | hello@postmeridian.co
Privacy Policy v1.1 â June 10, 2026 â Document subject to POSTMERIDIAN copyright