Privacy Policy

1. Data controller

The site's Publisher is the controller of personal data collected through the Service, within the meaning of Regulation (EU) 2016/679 (“GDPR”).

2. Data we collect

Account data: email address, name (optional), hashed password (never stored in plain text), or the identifier provided by Google/Apple during OAuth sign-in.

Usage data: appraised domain names, appraisal results, timestamps — linked to your account to build your history.

Billing data: name, address, company and VAT number where applicable, entered by you. Payment data (card number, PayPal account, crypto wallet) is processed exclusively by our providers Stripe, PayPal and NOWPayments and never passes through our servers.

Technical data: a session cookie, a daily-quota cookie, and server logs (IP address, timestamps) kept for security purposes.

3. Purposes and legal bases

Providing the Service and managing the account: contract performance. Invoicing and accounting: legal obligation. Free-quota limitation and fraud prevention: legitimate interest. Advertising (Google AdSense) for users without a paid offer: consent, collected through the cookie banner.

4. Retention periods

Account data: as long as the account is active, then 3 years after the last activity. Appraisal history: as long as the account exists, deletable at any time. Invoices and accounting data: 10 years (legal obligation). Technical logs: 12 months maximum.

5. Recipients and transfers

Data is processed by the Publisher and its technical processors: hosting provider, Stripe (card payments), PayPal (PayPal payments), NOWPayments (crypto payments), Anthropic (appraisal request processing — only the appraised domain name is transmitted, never your account data), Google (AdSense, OAuth sign-in where applicable), Apple (OAuth sign-in where applicable).

Some providers are located outside the European Union; transfers are governed by standard contractual clauses or an adequacy decision.

6. Advertising and cookies

Users without paid credits or a subscription see Google AdSense ads. Google may set advertising cookies subject to your prior consent, which you can withdraw at any time. Users with a paid offer see no advertising.

Details of the cookies used are given in our Cookie Policy.

7. Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability over your data. Exercise them from your account or by email at the contact address given in the Legal Notice. You may also lodge a complaint with your supervisory authority (in France, the CNIL — cnil.fr).

8. Security

Passwords are hashed with bcrypt, exchanges are TLS-encrypted, and access to production data is restricted. In the event of a data breach likely to create a high risk to your rights, you will be notified in accordance with Article 34 of the GDPR.