Privacy Policy

By accessing and using our platform, you agree to comply with and be bound by the following terms and conditions. Please read these terms carefully.

Effective Date: August 1, 2025. - Company Name: Am Stram Gram – ASG

Legal Address: 65B Rivière Haute, 81110 Dourgne, France

Sites & Apps Covered: grindy.fun & app.grindy.fun - Contact Email: contact@grindy.fun

1. Introduction

Grindy.fun ("we", "our", or "us") is operated by Am Stram Gram (ASG), a French company

registered under SIREN 910093970 and located at 65B Rivière Haute, 81110 Dourgne,

France. This Privacy Policy explains how we collect, use, and protect your personal data

when you use our websites (grindy.fun and app.grindy.fun) and our services, especially when

signing in with Google Authentication.

We are committed to protecting your privacy and complying with the European Union

General Data Protection Regulation (GDPR).

2. Data We Collect

When you log in using Google Authentication, we only access the following information:

Your Google email address

Your name (as displayed on your Google account)

Your Google profile picture (optional and only for avatar display)

We do not access your contacts, emails, calendar, or any additional Google services.

3. Purpose of Data Collection

We collect and use your data for the following purposes:

To authenticate and identify you as a user

To create and manage your user account on grindy.fun and app.grindy.fun

To personalize your user experience

To ensure platform security and user access control

To send essential service notifications (we do not use your email for marketing

without explicit consent)

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Data Storage and Retention

Your data is securely stored on our servers located in the European Union and managed via

Supabase (EU data hosting). We retain your data for as long as your account is active or as

required to fulfill legal obligations.

If you delete your account, all associated data will be removed within 30 days, unless we are

required by law to retain it.

5. Sharing and Disclosure

We may share your data only in the following cases:

With service providers necessary for platform operations (e.g., Supabase, Google

OAuth API) When legally required (e.g., legal requests or obligations under French/EU law)

In case of a business transfer (merger or acquisition), under confidentiality agreements

6. User Rights (GDPR)

As a user located in the European Economic Area (EEA), you have the following rights:

Right to access your personal data:

Right to rectification (correct inaccuracies)

Right to erasure (“right to be forgotten”)

Right to data portability

Right to object or restrict processing

Right to withdraw your consent at any time

To exercise these rights, contact us at contact@grindy.fun. We will respond within 30 days.

7. Cookies & Tracking

We may use essential cookies to:

Maintain user sessions

Enable security features (e.g., CSRF protection)

We do not use third-party advertising or tracking cookies on grindy.fun or app.grindy.fun.

You can disable cookies via your browser settings, but some features may not work as

intended.

8. Security Measures

We take security seriously and implement appropriate technical and organizational

measures to protect your data. This includes:

Encrypted HTTPS connections

Role-based access control

Rate-limiting and anti-bot protection

Regular audits and monitoring

Your data is stored in a secure cloud infrastructure managed by Supabase.

9. Third-Party Services

We use the following third-party providers:

Google OAuth: for secure login

Supabase: for database, authentication, & secure storage

Cloudflare: for CDN and DDoS protection

These services are GDPR-compliant and only receive minimal necessary data.

10. International Transfers

All data is processed and stored within the European Union. We do not transfer your

personal data outside of the EU unless explicitly stated and in full compliance with GDPR

(e.g., using Standard Contractual Clauses).

11. Children’s Privacy

Our services are not intended for children under the age of 18. We do not knowingly collect

or store data from children under this age. If we discover such data has been collected, we

will promptly delete it.

12. Updates to This Policy

We may update this Privacy Policy occasionally. We will notify users via email or app

notification in case of significant changes. The latest version is always accessible on our

website.

13. Contact Us

If you have any questions, requests, or concerns regarding this Privacy Policy, please contact us at:

Am Stram Gram (ASG). - Legal Representative: M Pellet

Address: 65B Rivière Haute, 81110 Dourgne, France e-mail: contact@grindy.fun

Ready to Join the Grind?

Sign up for free, connect your exchange, and start earning rewards in minutes.

Be a Grindy