Last update : 14/09/2025
Privacy Policy and Cookie Use
1 - Purpose
This Privacy Policy explains how Rovelia.io and its mobile application (the “Site”and the “App”) collect, use, and protect your personal data, in compliance with the General Data Protection Regulation (GDPR) and applicable data protection laws.
2 - Data Controller
The data controller is:
Xanocom
RCS Paris: 899 485 726
Registered office: 128 rue de la Boétie, 75008 Paris, France
Contact: Contact form
3 - Data We Collect
We collect only the data necessary to provide our services:
Identification: name, surname
Contact details: email address
Payments: payment data processed exclusively by Stripe (we do not store banking information)
Browsing data: IP address, technical logs, cookies
Community data: Full Name, Discord account ID and associated email
4 - Purpose of Processing
Your data may be used for the following purposes:
Managing subscriptions and billing
Providing access to the private community (Discord)
Responding to contact requests
Sending newsletters and updates (only with explicit consent)
Securing the Site and preventing fraud
Analyzing traffic and improving user experience (cookies)
5 - Legal Basis
We process personal data on the following legal bases:
Performance of a contract (subscription, community access)
Consent (newsletter, cookies)
Legal obligations (invoicing, accounting)
Legitimate interests (site security, fraud prevention)
6 - Mandatory or Optional Data
Some data must be provided (e.g. email address for community access). Without this, the Service cannot be delivered.
Other data is optional and clearly indicated as such when collected.
7 - Data Recipients
Your data may be shared with the Publisher and trusted third-party providers:
IONOS (hosting)
Stripe (secure payments)
Discord (community access)
Cookiebot (cookie consent management)
Analytics tools (e.g. Google Analytics)
All providers are bound by confidentiality and data securityobligations.
8 - Data Transfers Outside the EU
Some providers (Stripe, Discord) may process data outsidethe European Union, particularly in the United States.
These transfers are secured by European Commission Standard Contractual Clauses or other recognized safeguards.
9 - Data Retention
Subscription data: for the duration of the subscription + up to 3 years after termination
Billing data: 10 years (legal obligation)
Contact data: 3 years after last interaction
Cookies: up to 13 months after consent
Technical logs (IP addresses, connections): up to 6 months
10 - Your Rights
Under GDPR, you have the right to:
access your data, correct it, request deletion (“right to be forgotten”), restrict processing, object to processing, request portability.
To exercise your rights, please use the contact form.
You may also file a complaint with the CNIL (French data protection authority): https://www.cnil.fr.
11 - Cookies and Consent
When browsing the Site, cookies may be placed on your device for:
traffic measurement, navigation improvements, personalized content.
Consent is managed through Cookiebot, which allows you to:
accept all cookies, refuse all cookies, customize your preferences by category.
No non-essential cookies are set without your explicit consent.
Silence or continued browsing is considered a refusal.
12 -Data Security
We implement appropriate technical and organizational measures to protect your personal data against loss, alteration, disclosure, or unauthorized access.