Legal
Privacy policy
Last updated: October 2, 2026
This policy covers this site and each of Abyrène’s apps. It is written from their code: every statement in it has been checked, and it is corrected whenever an app changes.
In short
- Abyrène sells no data, builds no advertising profile and currently shows no real ads.
- No app asks for, stores or processes a payment method.
- What you create stays on your device. Three exceptions, detailed below: Moki’s cloud save if you turn it on, the Candelyx game portfolio, and Colorium’s anonymous totals.
- Two apps use Google: Moki (optional sign-in and analytics) and Candelyx (sign-in required). Clavyx loads its fonts from Google.
Data controller
SIMON Quentin, sole trader (entrepreneur individuel, France), under the trade name Abyrène.
Contact: abyrene.contact@gmail.com
This site
This site sets no cookies, stores nothing in your browser and uses no analytics. It loads nothing from any other domain: fonts and images are served by the site itself.
It is hosted by Cloudflare Pages. Like any host, Cloudflare processes your IP address and the technical information of the request to deliver the pages and protect the service (Cloudflare’s policy).
If you write to us, your email address and your message are used only to reply to you.
Moki
App page · moki-c58.pages.dev (opens in a new tab)
On your device
Your game — egg or dinosaur, gauges, inventory, quests, settings — is saved in the browser’s storage. It is not sent to us.
What is sent, and to whom
Cloud save and leaderboard (optional)
If you sign in with Google, Firebase (Google) receives your name, your email address and your account ID, and keeps your progress so you can find it on another device.
If you choose a nickname for the Top 20 leaderboard, only that nickname and your score (level, days, achievements) are visible to other players — never your name or your email address.
Audience measurement (with your consent)
On first launch, a banner asks you to accept or refuse cookies. If you accept, Google Analytics (Firebase) measures usage in aggregate — active players, session length — with no link to your name, your email address or your game. If you refuse, nothing is measured. You can change your choice in the app’s settings (Privacy).
Advertising
Moki offers to show you an ad in exchange for potions. For now, this screen is simulated: no ad network is loaded and nothing is sent to an advertiser. This policy will be updated before any real advertising arrives.
Third-party services
When it opens, Moki downloads the Firebase libraries from Google’s servers (gstatic.com): Google then receives your IP address and technical information about your browser. Policies: Google, Firebase.
Permissions
- Notifications, if you allow them: a local reminder after a few hours away. Everything happens on the device; no token or identifier is sent to a notification service.
- Orientation sensors: they animate the scenery when the phone moves. On iPhone, access is requested; the readings are neither recorded nor transmitted.
- No camera, no microphone, no contacts, no location.
Erasing your data
Clearing the site data in your browser deletes the local game. You can sign out of Google at any time in the app; to delete your cloud save and your leaderboard entry, write to us.
Colorium
App page · colorium-app.pages.dev (opens in a new tab)
On your device
Your paintings in progress and finished (the album), your Lucioles balance, your settings and the memory of your ratings are saved in the browser.
What is sent, and to whom
The app downloads the drawings from its own server (Cloudflare Workers). It sends that server four things: your rating of a picture, the fact that you finished it, game statistics, and Lucioles transactions. The server keeps only totals and counters.
The player ID
On first launch, the app randomly generates an ID on your device. It contains nothing about you. It accompanies these submissions to curb abuse and estimate the number of distinct players, but the server never records it: it immediately runs it through a statistical estimator, which gives an approximate number of players without keeping a list of them, then forgets it.
Your rating is recorded only within a total: it is your device that remembers what you rated, so you can change your mind without voting twice.
Game statistics
Per picture: games opened, finished, abandoned and at what stage of progress; completion time in quarter-hour brackets; number of sessions and days to finish (an interval, never a date); mode played; fill animation; where the Lucioles earned or spent came from. When a game is opened, the time and day of the week — those of your device — are added to overall counters.
These are counters, never a list of events: nothing makes it possible to reconstruct what any one person did.
Your IP address
The server sees it, like any web server. It uses it only in memory, to slow down submissions that come too fast, and never writes it anywhere: automatic request logging is turned off.
Advertising and purchases
The ad screen itself says that it is simulated: no ad network, no data sent to an advertiser. Lucioles packs are displayed with their price, but payment is not open: no payment provider is connected. Lucioles have no real value. This policy will be updated before any real advertising or payment.
Third-party services
None: no fonts, libraries or analytics coming from elsewhere. The app and its server are hosted by Cloudflare.
Permissions
No sensitive permissions, and no notifications.
Erasing your data
“Réinitialiser le compte” (reset account), in the settings, or clearing the site data erases your paintings, your balance and your ID. On the server side, nothing is linked to you: there is nothing else to delete.
Candelyx
App page · candelyx.pages.dev (opens in a new tab)
On your device
The sign-in session is kept by Firebase in the browser. Nothing else personal is stored there.
What is sent, and to whom
Google sign-in (required)
Candelyx requires Google sign-in (Firebase Authentication): without it, the app cannot be used. With each request, the app presents the Candelyx server with a token signed by Google, which contains your account ID, your name and your email address; they are used to link your portfolio to your account.
Your game portfolio
Lyx balance, positions, orders, history, trading house, badges and nickname are hosted on the Candelyx server (Cloudflare Workers). Other players see your nickname and your results on the leaderboard, never your name or your email address. None of this is used for advertising.
Advertising and purchases
“Regarder une pub” (watch an ad) shows a simulated screen for a few seconds in exchange for Lyx: no ad network, no data sent. “Acheter des Lyx” (buy Lyx) is marked “Bientôt” (coming soon) and disabled: no payment is possible. Lyx has no real value and can never be converted into money. This policy will be updated before any of this opens.
Candelyx uses no audience measurement.
Third-party services
Orbitron and Exo 2 fonts from Google Fonts, a charting library from unpkg.com, Firebase libraries from gstatic.com: these servers receive your IP address and technical information about your browser.
Permissions
No sensitive permissions. News is shown inside the app, with no notifications outside it.
Erasing your data
Write to us to delete your game account and your portfolio. During the beta, game data may also be reset.
Clavyx
App page · clavyx.pages.dev (opens in a new tab)
On your device
Clavyx collects, stores and transmits nothing: no messages, no keys, no identifiers. Encryption, decryption and analysis happen on your device. Presets, address book and settings are kept in the browser.
What is sent, and to whom
Nothing you write. No account, no advertising, no audience measurement.
Third-party services
The Inter and Cinzel fonts are loaded from Google Fonts the first time the app loads online: Google then receives your IP address and technical information about your browser (Google’s policy). After that, everything works offline, fonts included.
Permissions
Motion sensors, optional, to animate the background as the phone moves. The app works without them; no readings are recorded or transmitted.
Erasing your data
Clearing the site data in your browser deletes presets, address book and settings.
Spiriom
App page · spiriom-client.pages.dev (opens in a new tab)
On your device
Your maps and your run logs are saved in the browser (IndexedDB). They only leave it if you export them: as text, an image or a backup file, which you keep.
What is sent, and to whom
Nothing. No account, no server, no advertising, no audience measurement.
Third-party services
None: no fonts, libraries or scripts from another domain. The app is served by Cloudflare Pages, then kept on the device to work offline.
Permissions
No sensitive permissions.
Erasing your data
Delete the maps in the app, or clear the site data in your browser.
CPT
App page · cpt-client.pages.dev (opens in a new tab)
On your device
Your profiles, weapons, sessions and impacts are saved in the browser (IndexedDB and local storage). They only leave it if you export them: CSV, image or backup file, created on the device and kept by you.
What is sent, and to whom
Nothing. No account, no server, no advertising, no audience measurement.
Third-party services
None: no font, no library, no script from another domain. The app is served by Cloudflare Pages, then kept on the device to work offline.
Permissions
None: no camera, no microphone, no location, no notifications.
Erasing your data
Delete profiles and sessions in the app, or clear the site’s data in the browser.
Retired apps
Zortex collected no data: projects and samples stayed in the device’s browser. Deleting the app or the site data is enough to erase everything.
Origin, now on hold, required no account: a nickname and a session were enough. For any request about game data, write to us.
Hosting and transfers
The site and the apps are hosted by Cloudflare (Cloudflare Pages; Colorium and Candelyx servers on Cloudflare Workers). The Google services used are Firebase (sign-in, cloud save, leaderboard, analytics) and Google Fonts.
Cloudflare and Google are US companies: technical data may be processed outside the European Union, under the safeguards provided for by the GDPR, in particular the EU–US Data Privacy Framework, which they have joined.
Retention periods
- Data kept on your device: until you erase it.
- Moki cloud save and leaderboard: until you ask for them to be deleted.
- Candelyx game portfolio: as long as the game account exists; the beta may reset it.
- Colorium totals and counters: no time limit, since they are not linked to anyone.
- Messages received: for the duration of the exchange and its follow-up.
Children
Moki may appeal to younger players, and it can be played entirely without an account. In France, under 15, Google sign-in and accepting analytics require a parent’s consent. Google sign-in remains subject to Google’s age requirements.
Your rights
The GDPR gives you the right of access, rectification, erasure, objection, restriction and portability over your personal data. To exercise these rights, write to abyrene.contact@gmail.com; we reply within one month.
For most apps, there is nothing to request: your data is on your device, and clearing the site data in your browser deletes it. Each section above explains how to erase what is stored elsewhere.
You can also lodge a complaint with the CNIL, the French data protection authority: cnil.fr.
Changes
This policy will be updated BEFORE any new feature that affects your data: real advertising, a payment, a new third-party service, a new app.