Your camera images never leave your phone.
This policy covers the Pétanque Scanner mobile app
(com.raphbenpro.petanquear), not the ludiven-studio.fr website, which has its
own policy. Last updated: 10 September 2026.
This is a courtesy translation. In case of discrepancy, the original French version prevails.
The essentials:
Publisher of the app and data controller:
See also the legal notice (in French).
Pétanque Scanner needs camera access to work: it is the core of the app. It is important to understand exactly what is done with these images.
Photo mode. On phones that do not support augmented reality, the app automatically switches to a mode where you frame the pitch and then press a shutter button, instead of filming continuously. The principle stays the same: the image captured when you press the shutter is analysed in RAM only. It is not saved to a file, not added to your gallery and not transmitted; it is released as soon as you leave photo mode. In fact, the app asks for no permission to access your photos: only camera permission is required.
As a result, use of the camera involves no collection of personal data by the publisher.
Here is the complete inventory of the processing carried out by the app.
| Data | Purpose | Legal basis | Recipient |
|---|---|---|---|
| Device advertising identifier (GAID on Android, IDFA on iOS) | Displaying ads, personalised only if you consent | Consent (Art. 6(1)(a) GDPR) | Google (AdMob) |
| App usage events (see §5) and related technical data: device model, system version, app version, country | Analytics: understanding which features are used and improving the app | Consent | Google (Firebase Analytics) |
| The same usage events (see §5), together with: platform (Android or iOS), app version, phone language, screen resolution, operating system | Analytics, in addition to the above: getting a simple, cookie-free dashboard | Consent | Umami Software, Inc. (Umami Cloud) |
| Push notification token | Sending you notifications (news, reminders) | Consent | Google (Firebase Cloud Messaging) |
| Your consent choice | Remembering your decision so you are not asked again at every launch | Legal obligation / legitimate interest | Stored on the device; managed by Google (UMP) |
| Proof of purchase ("receipt") for Premium | Unlocking and restoring your purchase | Performance of the contract (Art. 6(1)(b)) | Apple or Google (app store) |
| Number of scans made today and today's date | Running the limit of 3 free scans per day | Performance of the contract | No one: stays on the device |
| Camera images | Boule detection | Performance of the contract | No one: local processing, no transmission |
The app does not collect: your name, your email address, your phone number, your contacts, your GPS location, your address book, your photos, or any identifier you may have entered. There is no account creation.
The app is free and funded by an advertising banner, as well as by an optional ad that you can choose to watch to recharge your free scans. The ad network used is Google AdMob.
At first launch, a consent screen managed by the Google UMP (User Messaging Platform) is shown to you where regulations require it (in particular in the European Economic Area, the United Kingdom and Switzerland). In practice:
To learn more about how Google uses data in this context: Google — Privacy and terms.
In the interest of transparency, here is the exhaustive list of events sent when you have consented. None of them contains data you have entered, an identifier we have created, or the results of your games.
Since September 2026, these events are sent to two analytics tools, which receive exactly the same list: Firebase Analytics (Google) and Umami Cloud. The second is a cookie-free statistics tool, used because it gives a simple, readable view of usage; it is described in detail below.
scan_started — a scan startsscan_completed — a scan completes, with the number of scans made that dayscan_blocked_quota — a scan is refused because the daily limit has been reachedfloor_confirmed — you have confirmed the ground detectioncochonet_redo — you ask to search for the jack againar_incompatible_shown — your phone does not support augmented reality; you are shown this informationphoto_offer_shown / photo_offer_declined — photo mode is offered to you, or you decline itphoto_mode_entered — photo mode starts, with the reason (automatic switch, offer accepted, or choice in the settings)photo_mode_exited — photo mode is exitedphoto_shutter — you take a photo, with an indication of whether the computation succeeded or failedphoto_retake — you retake a photophoto_camera_unavailable — the camera could not be openedsettings_opened — the settings screen is openedsettings_action — an action is triggered there: consent, privacy policy, terms of use, or purchase restorepaywall_shown / paywall_dismissed — the Premium offer screen is shown or closed, with the reason it was shownpaywall_watch_ad — you choose to watch an ad to recharge your scansad_reward_earned — the ad was watched to the end and the scans are rechargedad_unavailable — no ad was available to showpremium_purchase_started / premium_purchase_success / premium_purchase_failed — steps of a purchase, with the reason for failure where applicablepremium_restore_success — a previous purchase was restorediap_receipt_invalid — a proof of purchase could not be validatedconsent_accepted / consent_declined — your consent choicenotification_token_registered — the device is registered for notificationsTo these events, Firebase automatically adds standard technical information (device model, operating system version, app version, country inferred from the IP address, first open, session duration).
What Umami receives, precisely. Each event is sent to cloud.umami.is with the
following, and nothing more: the event name, a site identifier that belongs to us, the platform
(android or ios), the app version, your phone's language, your screen
resolution, and the name of your operating system. No advertising identifier, no device number, no
cookie and no persistent identifier is included. As with any request on the Internet, the server
necessarily sees your IP address; according to Umami's documentation, it is not stored: it is used only to
infer a country and to compute an anonymous fingerprint renewed every day, which can neither track you from
one day to the next nor recognise you in another app.
One exception, in full transparency: if you refuse consent, a single
consent_declined event is sent to Umami, so that we know what proportion of users refuse. It
contains no identifier and is followed by no other transmission: analytics remains entirely disabled. If
you would prefer absolutely nothing to be sent, refuse consent and use the app offline, or buy
Premium.
If you have consented and accepted the system's notification request, the device is registered with Firebase Cloud Messaging so that it can receive messages. Notifications are sent manually from the Firebase console; there is no automated sending server. You can disable notifications at any time in your phone's settings, with no effect on how the app works.
The "Lifetime Premium" purchase is a one-off purchase handled entirely by Apple's App Store or by Google Play. We never see your payment details: no card number, no billing address, no identity. The app only receives a proof of purchase, verified locally, which is used to unlock the feature.
So that the limit of 3 free scans resets at a reliable time (and cannot be bypassed by changing the phone's
clock), the app reads the reference time from a Google Firebase service hosted in the European Union
(Belgium, region europe-west1). This request is read-only: it transmits no
data about you. If it fails, the local clock is used.
Four pieces of information are stored locally, in the system's secure storage (Keychain on iOS, EncryptedSharedPreferences on Android):
This data is not synchronised to a server and is not backed up to the cloud by the app. Uninstalling the app erases it — with one exception: on iOS, the Premium flag may be kept by the Keychain, which is exactly what allows you to recover your purchase after reinstalling.
The only recipients of data are the providers listed below. We do not sell any data and share nothing with data brokers.
Some of this processing involves a transfer to the United States. These transfers are governed by the mechanisms provided for in Chapter V of the GDPR: standard contractual clauses and, for the providers concerned, certification under the EU-U.S. Data Privacy Framework.
Under the GDPR, you have the right of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw your consent at any time.
In practice:
If you believe your rights are not being respected, you can lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.
The app is not intended for children and is not designed as a service aimed at minors. It is not declared as such to the app stores and does not knowingly target under-16s. If you hold parental authority and notice that a child has used the app, contact us.
Data stored locally is kept using the secure storage mechanisms provided by the operating system. Network exchanges with Google services are encrypted (HTTPS/TLS). As there is no application server of Pétanque Scanner's own, the exposure surface is limited to the providers listed in §10.
This policy may change, in particular if the app gains new features. The date of the last update appears at the top of the page. In the event of a substantial change affecting your rights, you will be asked for new consent in the app.
For any question about this policy: contact@ludiven-studio.fr.
See also the app's terms of use.