Privacy policy
What personal data we process, why, for how long, and your rights.
To be reviewed and completed before the beta opens. For the documents themselves, see also Data management.
Data controller
[to be completed: legal name, address, contact email address]
On this site
- On the presentation pages: no cookies, no analytics, no script or font loaded from another site.
- Your theme choice is kept in your browser (
localStorage), never sent. - Web server logs: [to be completed: content and retention period].
Cookies of the signed-in space
To keep you signed in, the space sets strictly necessary cookies, exempt from consent. They only hold a random token, serve no advertising or measurement, and are never read by another site.
paginel_session: your sign-in to your account; 30 days, erased when you sign out.paginel_guest: your guest access to a document; as long as the code is valid.paginel_oidc: during a sign-in with Microsoft or Google; 10 minutes at most.
Beta access requests
- Data: your email address and, if you give them, your name, your organisation and your message.
- Purpose: writing to you about the beta, and only about it.
- Legal basis: [to be completed: consent, to be confirmed].
- Retention: [to be completed: until the end of the beta or until you ask, to be confirmed].
When you use Paginel
Your account, your documents, technical logs and usage counters are described on the Data management page: what we keep, where, for how long, and what we do not do.
Usage statistics of the app: only with your consent, asked the first time you open it and changeable in the Help menu (Aide › Statistiques d’usage anonymes). They count, per day, the buttons, menus, keyboard shortcuts and views used; a visit is a random id drawn at each opening, never kept on your device. No text, no account, no IP address. Global Privacy Control and Do Not Track count as a refusal. Legal basis: [to be completed: consent, to confirm]; duration: 25 months for the counts, 13 months for the visits. [to be completed: to confirm]
Access log: sign-ins, guests joining and refused attempts, with the IP address and the browser, to protect accounts and spot abuse; kept 180 days. Legal basis: [to be completed: legitimate interest (security), to confirm].
Processors and transfers
Hosting in France. Email delivery: Brevo. Payment, after the beta: Paddle (United Kingdom). Signing in with Microsoft or Google: their services, in the United States. [to be completed: full list and safeguards for each transfer]
Your rights
Access, rectification, erasure, portability, objection and restriction: write to us ([to be completed: address]). You can also lodge a complaint with the CNIL (cnil.fr).