Privacy Policy (GDPR)
Last updated: April 27, 2026
This policy explains how personal data is processed on the Game Growth Advisor website. It covers website browsing, contact requests, newsletter subscription, lead magnet delivery, analytics, and technical logs. It does not replace any separate client contract or statement of work for consulting engagements.
1. Data Controller
- THE BLUE HOUSE (SASU), 7, rue d'Arsonval, 75015 Paris, France
- Commercial service: Game Growth Advisor
- Contact: contact@gamegrowthadvisor.com
- Data protection contact: Cyril Guilleminot
2. Data Processed Through the Website
- Navigation and security data: technical metadata provided by your browser and network, including IP address, user-agent, requested URL, referrer, timestamps, and security logs processed by the host.
- Contact data: information you send by email, phone, WhatsApp, calendar booking, LinkedIn, or contact links.
- Newsletter data: email address submitted through the newsletter form and related subscription metadata.
- Lead magnet data: email address, requested asset, page URL, referrer, submission timing, and anti-abuse metadata used to deliver downloadable resources.
- Analytics data: aggregated website interaction events collected through Google Analytics 4 according to your consent settings where required.
- Consent data: cookie/analytics preferences stored in the browser localStorage keys used by the website consent banner.
3. Purposes and Legal Bases
| Purpose | Legal basis | Details |
|---|---|---|
| Website operation and security | Legitimate interest | Hosting, troubleshooting, abuse prevention, and service integrity. |
| Responding to requests | Legitimate interest or pre-contractual steps | Processing emails, calls, calendar bookings, and business inquiries. |
| Newsletter subscription | Consent | Sending Game Growth Advisor updates and allowing unsubscribe at any time. |
| Lead magnet delivery | Consent and legitimate interest | Sending requested resources and protecting the form against spam or abuse. |
| Audience measurement | Consent where required | Google Analytics 4 is managed through Google Consent Mode and the website consent banner. |
4. Recipients and Processors
- Netlify, Inc. for hosting, logs, security, and the lead magnet serverless endpoint.
- Google Ireland / Google LLC for Google Analytics 4 and Google Consent Mode.
- Loops for newsletter subscription forms, lead magnet contact updates, and transactional email delivery.
- Google Calendar, WhatsApp, and LinkedIn when you choose to use those external contact links.
- Leadsy / Instantly visitor tracking if active on the website for B2B visitor identification and lead intelligence.
5. International Transfers
Some processors are based outside the European Economic Area or may process data through international infrastructure. Where applicable, transfers are governed by appropriate safeguards such as standard contractual clauses, processor terms, or the relevant provider's data transfer framework documentation.
6. Retention Periods
- Technical hosting logs are kept for the period necessary for security, diagnostics, and service operation.
- Contact and business inquiry emails are kept for the time needed to handle the request and manage the business relationship or legal obligations.
- Newsletter data is kept until you unsubscribe or request deletion.
- Lead magnet request data is kept for delivery, audience management, anti-abuse, and follow-up unless you unsubscribe or request deletion.
- Analytics and cookie identifiers follow the retention settings of the relevant provider and your consent choices.
- Consent preferences are stored locally for up to 365 days unless cleared or changed earlier.
7. Your Rights
Subject to applicable conditions, you may request access, rectification, erasure, restriction, portability, or object to processing. You may also withdraw consent at any time for newsletter, lead magnet follow-up, analytics, and cookies where consent is the legal basis.
To exercise your rights, write to contact@gamegrowthadvisor.com. You may also lodge a complaint with your local data protection authority, including the CNIL in France.
8. Security
THE BLUE HOUSE uses reasonable technical and organizational measures to protect the website, including TLS, access control, limited secret exposure, server-side handling for lead magnet delivery, and anti-abuse checks on public forms.
9. Minors
The website is intended for professional audiences and is not directed at children under 15.
10. Updates
This policy may be updated to reflect changes to the website, providers, or legal requirements. The latest update date is shown at the top of the page.