Personal data
As little as possible, and nothing that follows you from one site to another.
Without an account
You read the site: no data about you is recorded. No browsing log is kept, either by the application or by the web server. Audience measurement (Umami, hosted by us) counts page views without cookies and without keeping IP addresses, and does not follow you from one day to the next.
With an account
| Data | Why | Kept for |
|---|---|---|
| Your email address | To identify you, send you the sign-in code, write to you while one of your contributions is being reviewed, and send you the steps of the needs you support, until you stop them. Never published, never shared. | Until you delete your account |
| The language of the site when you last signed in | To write to you in French or in English. | Until you delete your account |
| The display name, if you give one | To appear with your published contributions. | Until you erase it or delete the account |
| The sign-in code | To confirm that the address is yours. Only a hash is kept; the code is valid for 10 minutes and works once. | Erased within two hours of expiring |
| A hash of your IP address, linked to a code request | To limit abusive requests. The address itself is not recorded. | Erased with the code |
| Your votes and your support | To count one voice per person. Only the totals are public. | Until you withdraw them or delete the account |
| The "Stay signed in" token, if you chose it | To spare you a code on every visit. Only a hash is kept; it changes on every use. | 90 days without a visit, or until you sign out |
| Your API tokens | To open the API to your account. Only a hash is kept, with the date it was last used. | Until they are revoked |
Legal basis: performance of the service you ask for when creating an account (the terms of use), and the legitimate interest in protecting the service from abuse for the IP address hash.
Cookies
Three cookies at most, all needed for the service you ask for. None is used for advertising or comes from a third party, so none requires your consent.
| Name | Purpose | Lifetime |
|---|---|---|
maub_session | Keeps you signed in. Only set when you sign in. | Until the browser closes, 12 hours at most; one hour, renewed, if you ticked "Stay signed in" |
maub_renouvellement | Reopens your session without a new code. Only set if you tick "Stay signed in"; replaced on every use. | 90 days |
maub_theme | Remembers the light or dark theme you chose. Only set if you choose one. | 1 year |
Who has access
The publisher only. The server and the mail service that sends the codes are hosted in France by OVH SAS, acting as a processor. Nothing is sold or passed on.
Your rights
You can access, correct or erase your data. Deleting your account takes one click from its page; for anything else, write to contact@subalpine.it. You can also contact the CNIL, the French data protection authority.