Carcassonne: Tiles & Tactics

"The Personal Data that we collect may be transmitted... To our Affiliates. We may disclose Personal Data to companies in which we hold shares as necessary for the purposes described in this Policy. To our Partners... To social networks, in particular Meta®, which can also determine "why" and "how" your Personal Data is used. ... Please note that this list is not exhaustive and that there may be other instances where we share your Personal Data with third parties."

Asmodee shares personal data with a broad range of third parties including affiliates, partners, social networks, and tournament organizers, and explicitly states the list is not exhaustive — leaving the door open for undisclosed sharing.

"To provide you with personalized social media advertisements (using as a unique identifier the same email address you may have provided for the creation of your user accounts both on asmodee and on social media platforms). Asmodee relies on your consent in order to carry out the intended processing."

Asmodee uses your email address to match your identity across their platform and social media platforms like Meta, enabling cross-service ad targeting and profile linking.

"Each time you visit our Site, we automatically collect (but where required, with your consent) certain data and information about you and/or your computer or electronic device through the use of "cookies". This information includes: the IP address automatically assigned to your computer when you use the Internet... your country of residence and language."

Asmodee automatically collects IP addresses and country of residence on every visit, which enables geolocation tracking of users.

"For the purpose of proof of deletion, the following are kept for 3 years: the surname, first name, email, date and channel of deletion of the account from the date of deletion. ... In order to protect against any dispute, We may keep certain information for up to 5 years from the date of registration. ... Six (6) years in the event of exercising the right to object."

Even after account deletion, Asmodee retains personal identifiers for 3 years as 'proof of deletion,' keeps certain data up to 5 years for dispute protection, and retains data for 6 years if you exercise your right to object — significantly extending retention beyond active use.

"We may change this Policy from time to time. Where appropriate, we will notify you by changing the date at the bottom of this Policy and, in some cases, we will provide additional notices (e.g. by posting a statement on the home pages of our Site or by sending you an email). We encourage you to review the Privacy Policy whenever you interact with us."

Asmodee reserves the right to change the privacy policy at any time, with notification only 'where appropriate' and 'in some cases' — placing the burden on users to check for changes with no guaranteed direct notice.

"For the purpose of proof of deletion, the following are kept for 3 years: the surname, first name, email, date and channel of deletion of the account from the date of deletion. ... In order to protect against any dispute, We may keep certain information for up to 5 years from the date of registration."

After deleting your account, Asmodee retains your name and email for 3 years and other information for up to 5 years, meaning your data survives account deletion for an extended period.