Privacy Policy
Last updated: July 11, 2026
This policy describes how the website osezlasemainede4jours.com (hereinafter “the Site”) processes its users' personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act.
In short: the Site only collects the data needed for it to work (member account, submitted content, technical logs), sells it to no one, uses no advertising trackers, and relies on only three technical processors, listed below.
1. Data controller
The data controller is the Site's publisher: Laurent de la Clergerie (see the legal notice).
For any question about your data: ptitfox@gmail.com.
2. Data collected
The Site only collects the following data:
- Member account: email address, name, username and password. The password is never stored in plain text: it is hashed with the bcrypt algorithm (cost 12) before being saved.
- Submitted content: company reviews, forum topics and replies, company listings submitted to the directory. They are linked to your account and moderated before publication.
- Technical logs: the web server (nginx) logs IP addresses and requests for security and diagnostic purposes. The IP address is also used briefly, in memory, to limit abuse (rate limiting).
3. Purposes and legal bases
The Site performs no profiling, no commercial prospecting, and uses no third-party audience measurement tools.
| Processing | Purpose | Legal basis |
|---|---|---|
| Member account | Account creation, authentication and management | Performance of the contract (the Site's terms of use) |
| Submitted content | Moderation and publication of reviews, forum topics and company listings | Performance of the contract |
| Transactional emails | Sending emails related to account operation (via Resend) | Performance of the contract |
| Technical logs and rate limiting | Site security, abuse prevention, incident diagnostics | Legitimate interest |
4. Retention periods
In full transparency: there is currently no automatic deletion mechanism for accounts or content. Erasure is handled manually, upon request sent to the contact above (see “Your rights”).
- Member account: kept as long as the account is active. Account suspension is reversible and does not erase any data.
- Published content: kept as long as it remains online on the Site.
- Technical logs (nginx): 14 days.
5. Recipients and processors
Data is neither sold nor rented. It is only accessible to the Site's publisher and to the following technical processors:
- Apart from the safeguarded transfers listed above, no data is transferred outside the European Union.
| Processor | Role | Data concerned | Location |
|---|---|---|---|
| IONOS SARL | Server hosting (VPS) | All Site data | France / European Union |
| Resend | Sending transactional emails | Email address, content of sent messages | United States — transfer covered by the safeguards of GDPR Chapter V (standard contractual clauses / EU-US Data Privacy Framework) |
| Anthropic | AI summarization and scoring of press articles | No user personal data: only public press articles are sent to it | United States |
6. Your rights
Under the GDPR, you have the following rights over your data: access, rectification, erasure, portability, objection and restriction of processing.
To exercise them, write to: ptitfox@gmail.com. You will receive a reply within one month. Since account erasure is not yet automated, your request will be handled manually by the publisher.
If you believe your rights are not being respected, you can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).
7. Security
- Passwords hashed with bcrypt (cost 12), never stored or transmitted in plain text.
- Authentication session via an httpOnly JWT cookie (inaccessible to the page's JavaScript), SameSite=Lax, valid for a maximum of 7 days.
- Site connection encrypted with HTTPS (automatically renewed certificate).
- Server access restricted to the publisher (key-based authentication).
8. Cookies
The Site only uses cookies strictly necessary for its operation, described in the Cookie Policy. No advertising or tracking cookies are used.
9. Changes to this policy
This policy may be updated to reflect changes to the Site (new features, new processors). The last update date is shown at the top of the page; in case of substantial changes, members will be informed.