Last updated: 14 December 2025
SAS Join Colony Labs, 2 boulevard Michelet, 34350 Valras-Plage, France Contact: infos@the-life-bomb.com
Email address, username, encrypted password, country, and sign-in data from third-party services (Google, Discord, X) where the user chooses to use them.
During a run, the Application records precise GPS position, continuously, including in the background or with the screen off: successive coordinates, timestamps, speed, distance, altitude.
This collection is strictly limited to the duration of a run. It is essential to calculating distance and rewards. Refusing the permission prevents use of the running feature.
Step count, distance, duration, pace. This data comes from the phone's sensors and, with the user's explicit consent, from Apple Health (HealthKit) or Health Connect.
IP address, device identifier, model, operating system and application version, connection logs, session tokens, integrity attestation results (App Attest, Play Integrity), and correlation indicators between accounts used to detect automated account operation.
Progression, items held, balances, run history, internal transactions, sales and purchases on the marketplace, referral links, support tickets.
Public wallet address and the history of associated operations (deposits, withdrawals, swaps).
The Publisher collects no banking data. The Application contains no in-app purchases: acquisitions are paid for in crypto-assets from the user's wallet and leave a public trace on the blockchain (see 2.6).
| Purpose | Legal basis |
|---|---|
| Creating and managing the account | Performance of the contract (Art. 6.1.b) |
| Recording runs and calculating rewards | Performance of the contract |
| Reading activity data (Health / Health Connect) | Explicit consent (Art. 9.2.a) |
| Operations on assets and the marketplace | Performance of the contract |
| Combating fraud, cheating and market manipulation | Legitimate interest (Art. 6.1.f) |
| User support | Performance of the contract |
| Push notifications | Consent |
| Aggregated statistics, service improvement | Legitimate interest |
| Accounting, tax and regulatory obligations | Legal obligation (Art. 6.1.c) |
Data is neither sold nor rented. It is accessible to authorised staff and to technical processors (hosting, email delivery, notifications, monitoring, integrity attestation).
Transfers outside the European Union — framed by the European Commission's standard contractual clauses and, where applicable, by the Data Privacy Framework.
Blockchain — transactions recorded on Solana are public, permanent and viewable by anyone. By their nature they are beyond the Publisher's control.
| Data | Period |
|---|---|
| Account and game data | Lifetime of the account, then 30 days |
| Detailed GPS traces | 12 months, then only aggregated statistics are kept |
| Technical and security logs | 12 months |
| Fraud detection records | 24 months from the last event |
| Support tickets | 3 years after closure |
| Accounting records and transactions | 10 years (legal obligation) |
| Data recorded on the blockchain | Permanent, beyond the Publisher's control |
Rights of access, rectification, erasure, restriction, objection, portability, withdrawal of consent and the setting of post-mortem instructions.
These may be exercised from the Application, or by email to infos@the-life-bomb.com. Response within one month.
Limit on the right to erasure — data recorded on a public blockchain cannot be erased, by technical design. The Publisher can remove the link between an account and an address in its own systems, but not the on-chain records themselves.
A complaint may be lodged with the French data protection authority, the CNIL: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — https://www.cnil.fr
Available from the Application. It results in account and game data being erased within 30 days, subject to data the Publisher is legally required to retain and to data recorded on the blockchain.
The Application is restricted to adults aged 18 or over. The Publisher does not knowingly collect data concerning minors. Any data collected from a minor in error is deleted upon report, and the corresponding account is closed.
Encrypted communications (TLS), password hashing, environment separation, access logging, optional two-factor authentication, device integrity attestation, and access limited to what is strictly necessary.
The website uses strictly necessary cookies. Any analytics or advertising cookie is only set after consent has been obtained.
Any substantial change is brought to users' attention in the Application or by email. The version in force is the one published on the-life-bomb.com.