Privacy policy

Last updated: 2 November 2026

This policy explains how My Lovely Planet handles the comments and messages it receives on its Facebook Pages (including Messenger) and its Instagram accounts, and the data of the accounts connected to its internal tool “MLP Community Manager”.

Who we are

The data controller is Imagine SAS, Maison de la Technopole, 6 rue Léonard de Vinci, CS 20119, 53001 Laval Cedex, France, SIREN 893 691 758 (“we”). We publish the mobile game My Lovely Planet and the internal tool “MLP Community Manager”, which manages comments and messages on our own Facebook Pages (comments and Messenger) and Instagram professional accounts (comments and direct messages). We have not appointed a data protection officer; for any question, write to support@mylovelyplanet.org.

What we receive

• When you comment on one of our posts or write to one of our accounts on Instagram, Meta sends us the text of your comment or message, your Instagram username, an identifier specific to our account, the date, and the post concerned.
• When you comment on a post of one of our Facebook Pages or write to it on Messenger, Meta sends us the text of your comment or message, your Facebook name, an identifier specific to our Page, the date, and the post concerned.
• When you tap a button in one of our messages, or read it, Meta tells us so.
• If you open a personal link to our game, sent in a private message or, on Facebook, in our public reply to a comment (anyone who sees that reply can open it), we record the date and the type of device (iOS, Android or other). We do not store your IP address.
• When a member of our team connects an account with Facebook Login for Business, we receive the identifiers and names of the Facebook Pages and Instagram professional accounts selected, and an access token to manage them.

We never receive your password, your contacts or your payment details.

Why we use it

• To reply to your comments and messages, and to send you what you ask for, such as the game’s download link when you comment PLAY (JOUER on our French account).
• To follow up at most once within 24 hours of your last interaction, and to know whether our link was opened.
• To pass sensitive comments and messages to a member of our team, to act on your requests (HUMAN, STOP, DELETE), and to protect our accounts from abuse.
• To count, in aggregate, how many people go from a comment to the game.

Legal basis: our legitimate interest in running and protecting our accounts and answering our community (Article 6(1)(f) GDPR), and the steps you ask us to take when you write to us (Article 6(1)(b) GDPR).

Automated replies

Some replies are sent automatically: fixed messages written by our team, such as the message with the game link, and short replies to comments and messages, written by our reply system for each comment and checked by automated rules before they are sent. Comments and messages on sensitive topics are handled by a person. Write HUMAN at any time to reach a member of our team, STOP to stop automated messages, or DELETE to have your data deleted. No decision with legal or similarly significant effects is made automatically.

Who receives it

Our team, and the following service providers, bound by contract and acting on our instructions:

• Hetzner Online GmbH (Germany): hosting of our server and database in Nuremberg, Germany.
• Anthropic PBC (United States): text-processing service that drafts replies from the text of comments and messages. Under its commercial terms, it does not use our data to train its models.
• Slack Technologies (United States): internal alerts to our team, which may include your username or Facebook name and the text of a comment or message.
• Adjust GmbH (Germany): install measurement. When you open our link, you pass through Adjust, which receives the link’s code and tells us whether the game was installed from it.

Meta (Instagram and Facebook) carries our comments and messages and remains responsible for its own processing under its own policy. We do not sell or rent your data and do not use it for advertising.

How long we keep it

Comments, messages, button taps and link opens are deleted 90 days after we receive them. If you delete a message, or a comment on Facebook, we delete our copy as soon as Meta notifies us. Our copy of a deleted Instagram comment is deleted within 90 days, like all comments. When the owner of a connected account removes our app, we delete its access token at once and its data within 30 days.

Transfers outside the European Union

Our data is hosted in Germany. Anthropic and Slack are based in the United States; these transfers are covered by the European Commission’s standard contractual clauses.

Your rights

You can ask for access to your data, its correction or deletion, the restriction of its processing or its portability, and you can object to its processing, by writing to support@mylovelyplanet.org. To delete your data, see Data deletion. You can also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).

Changes

Any change to this policy is published on this page with its date.