Legal

Privacy policy

Template to complete. Highlighted fields must be filled with your real details, and this text must be reviewed by a legal professional before going live (then set SHOW_DRAFT_BANNER to False in tools/build_site.py to remove this banner).

Courtesy translation. The French version of this page is the legally binding one.

Data controller: [First and last name] (see the legal notice). Contact: info@xauterminal.fr.

Data collected

  • Account: email address and password (stored only in irreversibly hashed form).
  • Subscription: status, period end date and Stripe customer identifiers. Card data is entered with Stripe and never passes through our servers.
  • Technical: connection logs (IP address, date) for security and diagnostics.
  • Windows app: the app stores a sign-in token on your PC (encrypted with Windows) and contacts this site to check your subscription and receive the news and rates feed.

Purposes and legal bases

Providing the service and managing the subscription (performance of the contract); securing the service and preventing fraud (legitimate interest); meeting our accounting and legal obligations (legal obligation).

Recipients

Stripe (payment), the service host (Oracle Cloud Infrastructure). No data is sold or used for advertising.

Cookies and local storage

The site uses no advertising or audience-measurement cookies. A single strictly necessary session cookie keeps you signed in, and a language-preference cookie remembers FR or EN. The terminal stores your display preferences (tab, filters) in your browser's local storage. Live videos (YouTube) only load after your click, via the “youtube-nocookie.com” domain.

Retention

Account data is kept while the account is active, then deleted or archived in accordance with legal deadlines (for example, accounting records: 10 years). [to be verified]

Your rights

You have the rights of access, rectification, erasure, objection, restriction and portability. Write to info@xauterminal.fr. You may also lodge a complaint with the CNIL (cnil.fr) or your local data-protection authority.