This English version is provided for convenience; the French version prevails in case of discrepancy. Read the French version.
Draft prepared for launch: to be reviewed by a professional (lawyer, legal adviser or chartered accountant) before going live. Items in square brackets are to be completed.
1. Data controller
[First name Last name], Sole trader (French micro-entrepreneur scheme) (JoeyyFrench), [Postal address]. Contact: [email protected].
2. Data collected
- Account: username, email address, password (encrypted, never readable), avatar, date of acceptance of the terms.
- Discord (if you use it): ID, username, avatar and verified email address.
- Orders and purchases: descriptions, attached files, messages, quotes, invoices, download history.
- Payments: processed by Stripe and PayPal; we only receive a transaction reference and the payment status.
- Technical: session cookie, IP address and security logs.
3. Purposes and legal bases
- Managing your account, orders, purchases and support: performance of the contract.
- Invoicing and accounting: legal obligation.
- Website security, fraud prevention, moderation: legitimate interest.
- Newsletter and news: consent, which may be withdrawn at any time.
4. Recipients
Your data is accessible to JoeyyFrench and, as regards an order, to the Developer carrying it out. It is also processed by our processors: the hosting provider (Wasied (wasied.fr)), Stripe, PayPal, Discord and, when automatic translation is enabled, the translation service (DeepL SE, Germany, or the configured LibreTranslate instance), which only receives texts published or exchanged on the site (descriptions, messages, reviews) in order to translate them, without any account data. Some of these providers may transfer data outside the European Union, subject to appropriate safeguards (standard contractual clauses or Data Privacy Framework certification).
5. Retention periods
- Account: for as long as it is active, then deleted after 3 years of inactivity.
- Invoices and accounting records: 10 years (legal obligation).
- Security logs: 12 months maximum.
6. Your rights
You have the right of access, rectification, erasure, restriction, objection and portability. From My dashboard → Profile & data, you can download all your data (JSON file) and delete your account. You can also write to us at [email protected]. If you are not satisfied, you may lodge a complaint with the CNIL, the French data protection authority (cnil.fr).
7. Security
Encrypted passwords (bcrypt), protected login, secure cookies, protection against brute-force attacks and against cross-site request forgery.