Privacy Policy
At Nexustierlist, we take the protection of your personal data very seriously. This privacy policy informs you about how we collect, use, and protect your information in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.
1. Data Controller
The data controller for personal data is:
- Name: Loïc MARTI
- Email: contact@nexustierlist.com
- Address: 01140, France
2. Data Collected
2.1. Locally Stored Data (IndexedDB / localStorage)
Data concerned:
- Your saved tier lists (titles, images, organization)
- Your uploaded custom images (max 50 MB per image, total limit: 10 GB)
- Your language preferences (English/French)
Technology used: IndexedDB (with automatic fallback to localStorage if IndexedDB unavailable)
Purpose: Save your creations locally in your browser to retrieve them during future visits.
Legal basis: Legitimate interest (essential service functionality)
Retention period: Data retained until manual deletion by the user or browser cache/data clearing
Storage limit: 10 GB maximum for all your custom images. A storage indicator informs you in real-time of the space used.
Important: This data is stored only in your browser (IndexedDB primarily, localStorage as backup) and is never transmitted to our servers.
2.2. Feedback Form
Data concerned:
- Name (optional)
- Email address (optional)
- Message type (Bug, Suggestion, Other)
- Message content
Purpose: Process your support requests, improvement suggestions, and bug reports
Legal basis: Consent (voluntary form submission)
Retention period: Maximum 2 years from message receipt
Recipients: Loïc MARTI (site publisher) only
2.3. Browsing Data (Google Analytics)
Data concerned:
- IP address (anonymized)
- Browser type and operating system
- Pages visited and visit duration
- Approximate geographic location
- Traffic source (Google search, direct link, etc.)
Purpose: Analyze website traffic and improve user experience
Legal basis: Consent via cookie banner
Retention period: 26 months (Google Analytics)
Recipients: Google Ireland Limited (data processor)
ℹ️ Note: Google Analytics will only be activated after your explicit consent via the cookie banner. You can modify your preferences at any time.
2.4. Automatic Data Migration
When you first use the new version of the site using IndexedDB, your data previously stored in localStorage is automatically migrated to IndexedDB to benefit from better performance and increased storage capacity.
This migration occurs transparently when loading the site. Your old localStorage data is temporarily retained until successful migration confirmation, then automatically deleted.
Note: This migration only concerns data stored locally on your device and does not involve any transmission to our servers.
4. Data Transfer Outside the EU
Google Analytics (United States): Data collected by Google Analytics is transferred to Google LLC servers in the United States. This transfer is governed by the European Commission's standard contractual clauses.
By accepting analytics cookies, you also consent to this data transfer.
5. Your GDPR Rights
Under the GDPR, you have the following rights:
- Right of access: Confirm that your data is being processed and receive a copy
- Right to rectification: Correct inaccurate or incomplete data
- Right to erasure: Request deletion of your data
- Right to object: Object to the processing of your data
- Right to restriction: Request limitation of data processing
- Right to portability: Receive your data in a structured and readable format
- Right to withdraw consent: At any time for consent-based processing
How to Exercise Your Rights?
To exercise your rights, contact us at: contact@nexustierlist.com
We commit to responding to your request within a maximum of 1 month.
Complaint: If you believe your rights are not being respected, you can file a complaint with your local data protection authority.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal data against destruction, loss, alteration, unauthorized disclosure, or unauthorized access:
- Secure HTTPS connection (SSL/TLS encryption)
- Servers hosted in France (OVH, Gravelines)
- CSRF protection on forms
- Rate limiting to prevent abuse
- HTTP security headers (CSP, HSTS, X-Frame-Options, etc.)
- Strict validation of user input (XSS protection, injection prevention)
- Automatic compression of images (>5 MB) before local storage
- Local storage limitation to 10 GB to prevent saturation
- Secure migration of data from localStorage to IndexedDB
7. Third-Party Services
7.1. IGDB (Internet Game Database)
To display video game covers, we use the IGDB API (Twitch). No personally identifiable data is transmitted to this service. Only search queries (game names) are sent anonymously from our backend server.
Authentication to the IGDB API is done through our backend server with our own credentials (Client ID / Secret). Your IP address is never transmitted to IGDB.
7.2. Ko-fi
The Ko-fi widget is integrated to allow donations. If you use this service, you will be redirected to ko-fi.com which has its own privacy policy: Ko-fi policy
We do not collect or store your payment information.
8. Minors
Our service is not intended for children under 15 years old. We do not knowingly collect personal data from minors without parental consent.
9. Policy Modifications
We reserve the right to modify this privacy policy at any time. Modifications take effect upon publication on this page.
Last modified: January 31, 2026
10. Contact
For any questions regarding this privacy policy or your personal data:
Email: contact@nexustierlist.com
Last updated: January 31, 2026