Privacy policy

⚠️ Draft text, to be written or approved by a lawyer before going live. Items in square brackets must be completed.

Data controller

[Company name, address, contact email / DPO.]

Data processed

• Voters: email address (or phone number, or the identifier of the Google, Apple or Facebook account used to sign in), preferred language, votes cast, IP address in hashed or truncated form (fraud prevention).
• Candidates: first name, gender, chosen categories, photos (metadata removed), result of the age verification (yes/no and method only), consent (version, language, date, truncated IP, browser).
• No ID document, no date of birth, no estimated age and no image of a document is stored by the site: verification is carried out by a specialist provider.

Legal bases

• Consent (Article 6(1)(a) GDPR) for publishing photos and taking part.
• Legitimate interest for voting security and fraud prevention.

Retention periods

• Consent valid for at most 3 years, renewable.
• Photos deleted within 24 hours after consent is withdrawn.
• Duels: kept during the period and for auditing, then anonymised [12 months] after closing.

Social media and newsletter

• Our official accounts (Facebook, Instagram, Threads, Bluesky, X, TikTok) and our newsletter announce ranking changes: first name, rank and category of a ranked candidate. Their photo appears only with a separate, optional consent, given and withdrawn in one click from their account; otherwise an avatar replaces it.
• Posts already published on a social network are deleted on request.
• Newsletter: double opt-in subscription; the email address is handled by our email provider (Brevo, European Union) and used only for this newsletter. Unsubscribe with the link in every email. The site itself does not keep your address.

Hosting

All data is hosted in the European Union.

Cookies

Only strictly necessary cookies (sign-in session, chosen language). Cookie-free audience measurement.

Your rights

Access, correction, erasure, portability, objection: from your account (JSON export, account deletion) or by email to [address]. We reply within one month at most. You can lodge a complaint with the CNIL (cnil.fr) or your local supervisory authority.