BROODZ
Back to home

Cookie Policy

Service concerned: BROODZ (https://broodz.com) Last updated: 20 July 2026

1. Purpose and scope

This Cookie Policy describes the cookies stored on and/or read from your device (computer, tablet, phone) when you use the BROODZ online service, available at https://broodz.com (the "Service").

It sets out their nature, purpose, storage duration and legal basis. It supplements the Service's Privacy Policy and Legal Notice.

2. Publisher and data controller

  • Company name: COREDUMP ENGINEERING
  • Legal form: single-shareholder simplified joint-stock company (société par actions simplifiée à associé unique, SASU)
  • Share capital: EUR 10,000.00 (fixed capital)
  • Registered office: 61 rue de Lyon, 75012 Paris, France
  • SIREN: 943 070 755
  • Trade & Companies Register: 943 070 755 R.C.S. Paris (registered on 11/04/2025)
  • Data-protection contact: dpo@broodz.com

3. What is a cookie?

A cookie is a small text file stored on and/or read from your device when you visit a website or use an application. It can be used, among other things, to keep a session open.

Storing and reading certain cookies is subject to your prior consent; others, which are strictly necessary for the Service to work, are exempt from consent, in accordance with Article 82 of French Act No. 78-17 of 6 January 1978 (the "French Data Protection Act").

4. Cookies used by the Service

4.1 Strictly necessary cookies (no consent required)

These cookies are essential for the Service to work and to provide a service you expressly request (signing in, staying authenticated, securing the connection). Under Article 82 of the French Data Protection Act, they do not require your consent.

  • __Host-brood_session: session cookie. It maintains your authenticated session after sign-in and allows the server to link you to your game, username, score and ranking. It contains no advertising identifier. The __Host- prefix enforces encrypted (HTTPS) transmission and strict domain isolation.
  • __Host-brood_oauth: temporary security cookie set only during the sign-in procedure to prevent cross-site request forgery (CSRF) attacks. It is automatically deleted at the end of the sign-in procedure.

4.2 Audience measurement (cookieless)

Usage of the Service is measured through a Matomo instance that we host ourselves, configured without cookies and without cross-site tracking. This setup places no cookie on your device and falls within the consent exemption recognised by the CNIL for audience measurement: it does not require your consent. The statistics produced are aggregated and used solely to improve the Service. You may object to this audience measurement by writing to dpo@broodz.com.

5. Summary table of cookies

Name Purpose Storage duration Category
__Host-brood_session Maintaining the authenticated session (sign-in, username, score, ranking) Sliding, up to 7 days (604,800 s), renewed on each activity Strictly necessary (functional), no consent
__Host-brood_oauth Anti-CSRF protection during the sign-in procedure 10 minutes, deleted at the end of sign-in Strictly necessary (security), no consent

Audience measurement (Matomo) sets no cookie and therefore does not appear in this table.

6. Legal basis

  • Strictly necessary cookies (section 4.1): the data controller's legitimate interest in providing a functional and secure online communication service expressly requested by the user, Article 82 of the French Data Protection Act exempting these cookies from consent.
  • Audience measurement (section 4.2): the data controller's legitimate interest (Art. 6(1)(f) GDPR), cookieless audience measurement being exempt from consent under Article 82 of the French Data Protection Act.

7. Recipients and processors

  • OVH (OVH SAS / OVHcloud): hosting of the Service and its data, within the European Union.
  • Google (Google Ireland Limited / Google LLC): authentication provider ("Sign in with Google").
  • Meta Platforms, Inc. (Facebook Login): authentication provider ("Sign in with Facebook").
  • Snap Inc. (Login with Snapchat): authentication provider ("Sign in with Snapchat").
  • TikTok Technology Limited (Login Kit for TikTok): authentication provider ("Sign in with TikTok").
  • Matomo audience measurement is self-hosted: no data is passed to any third party for this purpose.

We do not sell or rent your data.

Facebook is a trademark of Meta Platforms, Inc.; Broodz is not affiliated with or endorsed by Meta.

Snapchat is a trademark of Snap Inc.; Broodz is not affiliated with or endorsed by Snap Inc.

TikTok is a trademark of ByteDance Ltd.; Broodz is not affiliated with or endorsed by TikTok.

8. Cookie preferences panel

A cookie preferences panel is available on the Service. Strictly necessary cookies remain always active there and cannot be disabled without degrading the Service; cookieless audience measurement, being exempt from consent, is not subject to it.

This panel is intended to collect your consent for any future non-exempt trackers (for example for marketing purposes), which are not used to date. Where relevant, you will be able to accept or refuse such trackers just as easily, then change your choice at any time; your choice would then be kept for a maximum of 6 months, in line with CNIL recommendations, before being requested again.

You can also configure your browser to accept, refuse or be alerted when cookies are set. Blocking strictly necessary cookies may prevent the Service from working properly (you may be unable to stay signed in).

9. Data transfers outside the European Union

Hosting of the Service and Matomo audience measurement are provided within the European Union.

The use of Google, Facebook, Snapchat or TikTok for authentication may involve a transfer of data to a country located outside the European Union. Such transfers are then framed by appropriate safeguards within the meaning of Chapter V of the GDPR: Google's participation in the EU-U.S. Data Privacy Framework and, failing that, the European Commission's standard contractual clauses.

10. Your rights

In accordance with the GDPR and the French Data Protection Act, you have the rights of access, rectification, erasure, restriction, objection and portability of your data, as well as the right to give instructions regarding what happens to your data after your death.

You can exercise these rights by writing to dpo@broodz.com. You also have the right to lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France (www.cnil.fr).

11. Minimum age

The Service is reserved for persons aged at least 13. If you are under 13, you must not use the Service or provide any personal data.

12. Deleting your account

You can delete your account at any time directly from your profile page in the application. Deleting your account ends the session and clears the associated session cookie.

13. Contact

For any question regarding this Cookie Policy: dpo@broodz.com.

14. Changes

We may amend this Cookie Policy to reflect legal or technical developments or changes to the Service. The applicable version is the one published on https://broodz.com on the date you consult it.