Last updated: March 5, 2026
| Data | Purpose | Legal basis (Art. 6 GDPR) | Retention |
|---|---|---|---|
| Email address | Authentication (magic link), transactional emails | Performance of contract | Account duration + 3 years |
| Favorites (list of effects) | Cross-device synchronization | Performance of contract | Account duration |
| Preferences (theme, accent) | Interface personalization | Performance of contract | Account duration |
| Payment data | Subscription processing | Performance of contract | Managed by Stripe (never stored on our servers) |
| IP address (server logs) | Security, abuse prevention | Legitimate interest | 12 months |
| Anonymous usage data (Matomo) | Traffic statistics | Legitimate interest | Anonymous — no personal data |
| Sub-processor | Purpose | Location | Safeguards |
|---|---|---|---|
| Stripe Inc. | Secure payment | USA | DPF (EU-US Data Privacy Framework), PCI DSS |
| Hostinger International | Web hosting | EU (Lithuania/Cyprus) | EU servers |
| Supabase Inc. | Database (PostgreSQL) | EU (AWS eu-west-1, Ireland) | DPF, SOC 2 Type II, data encrypted at rest |
| Google Workspace | Transactional email delivery (SMTP) | EU | DPF, ISO 27001, SOC 2 |
| Matomo (self-hosted) | Anonymous statistics | France (stats.optimetier.fr) | No personal data collected, hosted on our own servers |
| Cloudflare Inc. | Anti-spam protection (Turnstile CAPTCHA) | USA / EU | DPF, ISO 27001, SOC 2 |
We do not sell, rent or share any personal data for advertising or commercial purposes.
The website only uses strictly necessary technical cookies, exempt from consent requirements (as per CNIL — French Data Protection Authority — guidelines):
No advertising, analytics or profiling cookies are used. Matomo Analytics (self-hosted) operates without cookies.
You have the following rights regarding your personal data:
To exercise these rights: effects-lab@optimetier.fr. We respond within 30 days maximum.
If you believe that the processing of your data is not compliant, you may lodge a complaint with the relevant supervisory authority:
EU and French residents:
UK residents: your data is also protected under the UK GDPR and the Data Protection Act 2018. Your supervisory authority is the Information Commissioner's Office (ICO): ico.org.uk.
California residents (USA): under the California Consumer Privacy Act (CCPA/CPRA), you have the right to know the categories of personal data collected, to request their deletion, and to not have your data sold. We do not sell any personal data. To exercise your rights: effects-lab@optimetier.fr.
The service is intended for professionals and developers. We do not knowingly collect data from persons under the age of 16. If you are a parent and believe your child has provided us with data, please contact us for deletion.
This policy may be updated. In the event of a substantial change, we will notify you by email. The current version is always available on this page.
For any questions regarding your data: effects-lab@optimetier.fr