Draft awaiting validation. This text will be reviewed before real payments open; they are not enabled.

Privacy policy

Version of 19 October 2026 (draft) · reference legal-2026-10-19-draft

In short. YOURTAP records the minimum needed to sell and count participations. No advertising trackers, no cross-site tracking, no sale of data. Choices linked to payments are never published individually. Personal sharing described below is a separate statement made at your request.

This English text is a translation; the French version prevails in case of difference.

1. Data controller

Kenny Symphon, sole trader (Atelier IA Jura brand), Conliège (Jura), France. Contact for any question or request: contact@atelieriajura.fr. No data protection officer has been appointed.

2. Data, purposes, legal bases and retention

Cookies and browser storage

• yourtap_actor: a random identifier that says nothing about you. It prevents double charges (an interrupted order is resumed instead of created again), proves that the current order is yours and helps limit abuse. Lifetime: 8 hours. Legal basis: performance of the contract.
• yourtap_account: your session, only if you sign in to an account. It expires after 8 hours in your browser; the session stored on the server expires after 7 days at most and is erased when you sign out or delete the account.
• yourtap_admin: the operator’s administration session, 8 hours. To open it, Cloudflare Access also sets its own cookies (including CF_Authorization), for 24 hours at most. They do not concern visitors.
• Browser session storage: your chosen language, the current order (its reference and token) and the explainer you closed. These stay in your browser and disappear when the tab is closed.

These cookies are strictly necessary for the service; there are no advertising or audience measurement cookies, so no consent is requested.

Optional account

Username, password stored only in hashed form (scrypt, never in clear) and creation date. Purpose: signing you in and linking your participations to a single identity. Legal basis: performance of the contract. Retention: until it is deleted, from the account (“Your account”, then “Delete my account”) or by email.

Deletion immediately erases the username, the hashed password and the sessions. Orders and participations are kept (see below) but detached from the account. The internal voter identity that links them together is a random identifier: it remains, with no further link to the deleted username or password. This is pseudonymisation, not full anonymisation: it lets your paid participations still count. The deletion is recorded in the audit log without identifier or name.

Voluntary “My choice” and “Challenge” sharing

When available, these options let you freely select a choice and explicitly agree to share it; no payment history is read. A separate checkbox, unchecked by default, lets you show the signed-in account’s username. Visitors without an account share without a name. Questions excluded from personal sharing keep only their public Results cards.

“My choice” generates a private image at your request: neither the image nor the statement is retained by the service. Your accompanying message stays in your browser. For a Challenge, the service keeps the question and revision, consented choice, username display option, consent version and date, expiry and technical management references for up to seven days. Anyone receiving the opaque link can use it; the answer appears only after a free reveal action, without recording any participation or choice from the recipient.

Without an account, a management cookie prefixed yourtap_share_owner_ is established before a Challenge is created and renewed for seven days when you make a new request. Several cookies may coexist if you start in multiple tabs. They let you withdraw links on this browser; only hashed derivatives of the secrets are stored on the server. These cookies do not track visits. Clearing browsing data loses anonymous management access: contact contact@atelieriajura.fr with the link for assistance, with no guarantee of automatic recovery. Account holders manage their links through their session.

Withdraw a Challenge from Share → Challenge → Your challenges, or “Manage my challenges” when creation is disabled. Withdrawal erases the choice from the service and invalidates the link; a technical reference stays until expiry to prevent duplicates. Expiry, removal of the question and account deletion also invalidate links. Expired data is purged during accesses and backups; restoration invalidates all personal links to prevent withdrawn choices from reappearing. Withdrawal cannot erase downloaded files, screenshots or copies kept by recipients or social networks.

Consent to share a choice or username can therefore be withdrawn without changing paid participations. These cards create no acquisition tracking or Ambassador points. Section updated: 18 October 2026.

Orders and participations

Question and its version, the answer chosen (one of the question’s two answers, YES or NO by default), amount, estimated connection country (country only), timestamps, Stripe payment identifiers, status of the payment, refunds and disputes, amount of tax included in the price and the country Stripe retained for that tax, reference of the version of the terms in force at the time of purchase, account where applicable (removed if you delete your account), and a hashed derivative of the technical cookie. Purposes: performing the purchase, counting the participation, refunding, handling disputes, bookkeeping and declaring the taxes due according to the customer’s country. Legal bases: performance of the contract; legal obligation for accounting records. Retention: 10 years. [TO BE COMPLETED: period to be confirmed by the accountant]

Voter identity

For a payment without an account, Stripe supplies a card fingerprint: an identifier from which the card number cannot be recovered. The site immediately hashes it with a secret specific to the service and keeps only the result. It never records the card number or the raw fingerprint. Purpose: applying the “one opinion per identity” rule described in the terms and publishing, at closing, the number of voters and supports. Legal basis: performance of the contract. Retention: same as participations.

Country and public results

The country is estimated from your connection by the infrastructure serving the site; your IP address is not recorded with the order. Without a reliable estimate, the participation is filed under “unknown country”. This country is never a nationality or a place of residence. This estimated connection country is used for the public counter by country and to check that sales are open from your country. For tax, the customer is located by the billing address requested on Stripe’s payment page (country and, in some countries, postal code): the site keeps only the country Stripe retained, never the address. Only totals are published; a country with too few participations is grouped with others so that no individual choice can be inferred.

Technical logs and security

Server logs with truncated IP addresses; payment refusals logged without payment content; per-address abuse counters, stored hashed and erased after about ten minutes; IP address of administration sign-in attempts, recorded in the audit log. Purposes: security, fraud prevention and diagnosis. Legal basis: legitimate interest. Retention: 30 days for addresses in technical and audit logs; after that, the address is removed from the audit entry, which remains without it. Database backups are kept for 14 days with the current setting, then deleted.

Explainers

The artificial intelligence service that helps prepare the explainers only receives the question and public sources. It never receives accounts, orders, individual choices or results. Reading a question or paying triggers no AI generation.

3. Payment and Stripe

Stripe Payments Europe, Ltd. (Ireland) collects your payment data (card number, expiry date, security code) and the contact details it asks for directly on its own page, including the billing address needed to calculate tax (Stripe Tax). The site never receives the card number and records neither your name, nor your email address, nor your postal address: only the payment identifiers, its amount, its status, the tax included and the country Stripe retained to calculate it, and the card fingerprint, hashed immediately. Stripe receives from the site the question title, the amount and an order reference, but not the answer you chose. Stripe processes this data under its privacy policy.

4. Recipients

• The operator, the only person with access to the administration.
• Stripe, for payments, refunds and disputes.
• Cloudflare, Inc. (United States), which serves the site from its global network and manages the domain name. It handles the requests, including your IP address, to display the pages and protect the site.
• Supabase Pte. Ltd. (Singapore), which hosts the database in the Frankfurt region (Germany, European Union).

Cloudflare and Supabase are processors: they handle this data on the operator’s behalf, only to provide their service.

No data is sold, rented or passed to advertisers. No profiling or automated decision concerns you.

5. Transfers outside the European Union

The database is hosted in the European Union, in Frankfurt. The site itself runs on Cloudflare’s global network, usually in the data centre closest to the visitor. While a request is being handled, your data (including your IP address) may therefore be processed outside the European Union, in particular in the United States.

These transfers are safeguarded. Cloudflare and Supabase are bound by data processing agreements that include the European Commission’s standard contractual clauses. Cloudflare is also certified under the EU-U.S. Data Privacy Framework. Supabase is a Singapore company: if its staff access the database, for example for maintenance, these clauses apply.

Stripe is established in Ireland and processes your payment data under its own framework: transfers to its processors outside the European Union are covered by standard contractual clauses (see its privacy policy).

6. Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability. Write to contact@atelieriajura.fr; you will receive an answer within one month. With an account, you can also delete it yourself from “Your account”. For a payment without an account, give the question and the date and time of payment so the order can be found. Some data must be kept for accounting obligations, even after an erasure request.

You may also lodge a complaint with the CNIL, the French data protection authority: www.cnil.fr.

7. Minors

Payment and accounts are reserved for people aged 18 and over, or the age of majority in their country if it is higher.

8. Security

Encrypted connection (HTTPS), hashed passwords and card fingerprints, administration restricted to the operator by Cloudflare Access, then protected by password and second factor, separate demonstration, test and live environments.

9. Changes to this policy

This policy may change; its date appears at the top of the page. See also the terms of use and sale.