Legal
Privacy policy
In short
- No ads, no analytics, no tracking cookies, no data resale.
- Your browser never contacts third parties: fonts, logos and article images are served by our own server. The only exception is the Google sign-in reserved for editors.
- An account only stores what is strictly needed, and you can export or delete it at any time.
Data controller
Maxence Bonnici, publisher of the site (see the legal notice). Contact: the contact form on mbonnici.fr.
Data we process
Without an account, you can read the free edition without providing any personal data. Guest mode (a demo with fictional data) collects nothing either: what you do there stays in your browser.
| Processing | Data | Legal basis | Retention |
|---|---|---|---|
| Access request | First name, last name, email address, language, date of the request | Steps taken at your request before an agreement (GDPR art. 6.1.b) | Until the editors answer (the request is then deleted), 30 days at most. If approved, only the email and a username derived from your names are kept in the account. |
| Reader account | Username, email address, password (hashed with bcrypt, never stored in clear), chosen portrait, language, role, sign-up and last login dates | Performance of the terms of use (GDPR art. 6.1.b) | Until the account is deleted; automatic deletion after 3 years without login |
| Google sign-in (editors only) | Google ID, first name, verified email address | Legitimate interest: securing access to the editor's desk | Same as the account |
| Notifications (optional) | Subscription address provided by your browser's notification service, encryption keys, chosen notification types, language; link to your account if signed in | Consent (GDPR art. 6.1.a), withdrawable at any time from the bell | Until turned off, or deleted automatically when the browser revokes the subscription |
| Email exchanges (feedback, forgotten password) | Email address and message content | Legitimate interest: answering your request | For as long as needed, 12 months at most |
| Clippings and watched coins | References of saved articles and coins, title, date saved | Performance of the terms of use | Until removed or the account is deleted |
| Security | IP address, kept in memory only to rate-limit login attempts and access requests; a small anti-robot calculation run by your browser (no third-party service, no cookie) | Legitimate interest: preventing abuse (GDPR art. 6.1.f) | 15 minutes to 24 hours, never written to disk |
The application does not record IP addresses in its logs. Technical logs (errors, scheduled job status) contain no personal data.
Recipients and processors
- Your data is only accessible to the publisher. It is never sold, rented or shared.
- Cloudflare, Inc. routes traffic (DNS, protection, caching) as a processor. Transfers to the United States rely on the EU–US Data Privacy Framework and standard contractual clauses.
- Google (Google Ireland Limited), only for editors signing in; Google acts as a separate controller under its own privacy policy.
- Browser notification services (Google, Mozilla, Apple, Microsoft), if you turn notifications on: they deliver end-to-end encrypted messages that they cannot read.
- CoinGecko and news publishers are queried by our server, never by your browser, and receive no data about you.
Security
End-to-end HTTPS, passwords hashed with bcrypt, HTTP-only SameSite session cookie, login rate limiting, access requests reviewed by hand and protected against bots, a strict Content Security Policy, a database that is not exposed to the Internet, and a server located in France.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, and to set instructions for what happens to it after your death. Most of these rights can be exercised directly from your account: edit your details, download your data as JSON, or permanently delete your account.
For any other request: the contact form on mbonnici.fr. You will get an answer within one month. You can also lodge a complaint with the French data protection authority, the CNIL (cnil.fr).
Minors
Creating an account is reserved for people aged 15 or over.
Changes
This policy may evolve with the service. The last update date is shown at the bottom of the page; significant changes are listed in the project changelog.
Last updated: November 15, 2026