Translation provided for information only: only the French version is legally binding.
Privacy policy
In short
- We only collect what the service needs: no advertising, no trackers, no reselling.
- Only two cookies, both essential (login and chosen language): no cookie banner needed.
- No IP address is stored in clear; your page statistics are anonymous counters. To block abuse (login attempts, bots, fake clicks), an encrypted, truncated fingerprint of the IP is kept for 48 hours at most, and the address cannot be recovered from it.
- Fonts and scripts are hosted on this site: your visit is not passed on to any third party (Google, CDN…).
- From your profile, you can download all your data or delete your account in one click.
1. Data controller
[à compléter : nom ou raison sociale], [à compléter : adresse] — contact for any question or request about your data: [à compléter : e-mail de contact].
2. Data processed, purposes and legal bases
| Processing | Data | Legal basis | Retention |
|---|---|---|---|
| Account (creation, login, security) | Username, email, password (hashed, never readable), preferred language, date of acceptance of the Terms, date of last login | Performance of the contract (Terms) | Until the account is deleted; account inactive for 3 years: notice by email then deletion 30 days later; email address never confirmed: account deleted after 7 days |
| Public card | Display name, bio, photo, cover, links, social networks, theme — which you choose to make public | Performance of the contract | Until modified or deleted |
| Statistics for your page | Number of views, QR scans and clicks per day — no IP, no visitor identifier | Legitimate interest (providing you with statistics) | Lifetime of the account |
| “Discover” showcase and tags | Your card and your tags | Consent (opt-in checkbox, can be withdrawn) | As long as the option is active |
| Directory (Premium) | Saved people, their author's private notes and tags | Legitimate interest of the author (managing their network); anyone can object | Until the entry is removed or one of the two accounts is deleted |
| Events | Created events, registrations (name and photo visible to the organizer and logged-in members) | Performance of the contract | Registrations erased 12 months after the end of the event |
| Service emails | Email address, message content (confirmations, changes, reminders) | Performance of the contract; can be turned off in your profile | Sending log erased after 30 days |
| Reports and Premium | Reason for the report (without the reporter's identity or IP), Premium request and its message | Legitimate interest (moderation); performance of the contract | Reports: 12 months |
No automated decision-making or profiling. No sensitive data is requested.
3. Recipients
- The publisher and, for moderation, the site's super administrator(s).
- The host: [à compléter : hébergeur] (processor, data storage).
- Other users, only for what you make visible: your public card, your presence in the showcase, your registration for an event (organizer and logged-in members).
No data is sold, rented or used for advertising purposes. No transfer outside the European Union.
4. Cookies
The site uses only two cookies, both exempt from consent (article 82 of the French Data Protection Act, loi Informatique et Libertés):
PHPSESSID: strictly necessary for login and form protection (deleted when the browser is closed);lang: remembers the language you chose with the 🌐 button (1 year).
No audience measurement, advertising or social network cookies.
Embedded content (videos, Spotify)
A card may contain YouTube or Vimeo videos and Spotify players. By default, only a thumbnail hosted on this site is displayed: no data is sent to these services until you click ▶. When you start playback, the player from YouTube (in “no-cookie” mode, youtube-nocookie.com), Vimeo (“do not track” option) or Spotify is loaded from their servers: these services then receive your IP address and may set their own cookies, under their own privacy policies. Clicking counts as consent for that playback only.
5. Your rights
You have the rights of access, rectification, erasure, restriction, portability and objection, as well as the right to withdraw your consent and to set instructions regarding what happens to your data after your death.
- Access and portability: Profile → My data → “Download my data” (ZIP archive: JSON file + photos).
- Rectification: edit your profile, email address and links directly.
- Erasure: Profile → “Delete my account”. Everything is erased immediately (card, links, photos, statistics, directory, events, registrations, pending emails).
- Objection: untick “Appear in Discover”, “Allow the directory” or email notifications.
- For any other request: [à compléter : e-mail de contact] — reply within one month.
If you believe your rights are not being respected, you can file a complaint with the CNIL.
6. Security
Hashed passwords (bcrypt/Argon algorithm), protection against cross-site request forgery (CSRF), session cookie
HttpOnly and SameSite (and Secure over HTTPS), verification of the actual type of uploaded images,
HTTP security headers, access to internal files forbidden.
7. Minors
The service is reserved for people aged 15 or older.
8. Changes
In the event of a significant change, you will be asked to accept the new version the next time you log in.