Privacy policy

Who is responsible for your data

The controller is QUIBA, SASU (SIREN 815 082 045), [À COMPLÉTER : adresse complète du siège]. [À COMPLÉTER : confirmer que QUIBA est bien l'éditeur de ce site, avec ces informations (SASU, SIREN 815 082 045, Paris 8e)]

Contact for any question or to exercise your rights: [À COMPLÉTER : adresse e-mail de contact].

The data we process

We process only:

• your free-text answers to the questions, as you write them (they are saved on our servers as soon as you write, even before you send them);
• your first name or nickname, if you give one (optional);
• your language (French or English);
• dates: that of your “18 or older” declaration, that of your consent and of the end of your answers, that of the creation of the invitation link, that of the last consultation of the comparison;
• fingerprints of your links (a scrambled, irreversible form of your links, never the links themselves);
• rate-limit counters, which contain a fingerprint of your IP address (never the address itself) and only serve to block robots;
• the copy of an answer, if it is reported (see the section on reports).

The data we do not process

We do not ask for an e-mail address, a real name, an account, a password or a date of birth (only the declaration that you are 18 or older). The site uses no cookie, no tracker, no audience measurement and makes no request to any third-party site: even the typefaces are served from the site. No IP address is recorded by the application.

What this data is for

• letting you answer the questionnaire and pick up where you left off;
• showing your answers to the person you invite, and showing you theirs next to yours, once you have both finished;
• protecting the service against robots and abuse;
• reviewing answers that are reported;
• making, if you ask for it, a card image for stories with your own answers (it is never kept).

On what basis

Sharing your answers with the invited person rests on your consent (article 6.1.a of the GDPR), given by the box you tick before sending. Your free-text answers may reveal very personal things (opinions, health, private life): for this possibly sensitive data, we ask for your explicit consent (article 9.2.a). You can withdraw it at any time by deleting your answers.

Rate limiting against robots and the review of reports rest on our legitimate interest in protecting the service and its users (article 6.1.f).

While you write, before the consent screen, your answers are already saved as you go: you are told so from the first screen. [À COMPLÉTER : the lawyer confirms the legal basis of this draft phase]

Who receives this data

We sell nothing and share nothing with advertisers or audience services.

• The other participant: they only see your answers once you have both finished and consented. One thing is shown earlier: if you invited that person, your first name or nickname appears on the invitation page as soon as they open it, before they have given anything.
• The team, only for an answer that is reported.
• Our technical processors: Vercel [À COMPLÉTER : confirmer le nom exact de l'hébergeur] (hosting of the site) and [À COMPLÉTER : fournisseur de la base de données et sa région dans l'Union européenne] (database). They do not use your data for their own purposes.

Transfers outside the European Union

We choose servers located in the European Union. Some of our processors are nevertheless American companies (this is the case of the host of the site, Vercel): access from the United States, for example for support, is possible. These transfers must be covered by safeguards (standard contractual clauses or the EU–US data protection framework).

[À COMPLÉTER : check the actual safeguards of each processor and describe them here]

How long we keep it

You can also delete everything yourself, right away, whenever you like.

• Invitation left unanswered: erased 14 days after the first link was created.
• Draft never finished: erased after 14 days without writing.
• Comparison: erased 30 days after the last time it was opened (or after the answers were finished, if nobody opened it).
• Reports: the copy of the reported answer is kept for 30 days, even if its author deletes their answers in the meantime.
• Rate-limit counters: from one minute to one day at most depending on their use, then they disappear.
• Card for stories: never kept.
• Backups of the database host: [À COMPLÉTER : durée de conservation des sauvegardes de la base de données]. A deleted answer may remain in them until the end of this period.
• Technical logs of the site host: [À COMPLÉTER : durée de conservation des journaux de l'hébergeur].

Your rights and how to exercise them

You have the right to access your data, have it corrected, have it erased, restrict its processing, object to it, get a copy of it, and withdraw your consent at any time.

There is no account: your personal link is your proof. With it, you can reread your answers, you can delete them yourself at any time (“Delete my answers” screen, immediate and final), and deleting amounts to withdrawing your consent. Before sending your answers you can edit them; once sent, they are locked: to change them, delete them and start again.

For any other request, write to [À COMPLÉTER : adresse e-mail de contact]. We only keep fingerprints of your links: if you lose your personal link, we cannot find your answers.

An honest limit: we cannot erase what the other person has already read or copied, nor a card already published on a social network.

If you think your rights are not respected, you can lodge a complaint with the CNIL (Commission nationale de l'informatique et des libertés), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr.

How we protect your data

• Your links are random 128-bit codes, impossible to guess; we only keep their fingerprint, as for a password.
• Exchanges with the site are encrypted (HTTPS).
• Answer pages are not indexed by search engines and are not cached.
• Security headers and a limit on the number of requests protect the site.
• The application's log contains no link, no answer, no nickname and no IP address.

Technical access by the team and the host

Your answers are stored in the database. As long as they are not encrypted by the application itself, the people who run the service and the database provider can technically read them. We commit to doing so only to run the service or to review a report.

[À AJUSTER : according to the decision on encrypting answers in the application]

The host's logs and the invitation link

Like any host, the host of the site keeps in its technical logs the addresses requested and the IP addresses of visitors, for a period of its own. The invitation link (which starts with /i/) therefore appears there. This link works only once, only for 14 days, and gives access to nothing until the person has clicked “Start”; but you should know it.

The application itself writes no link, answer, nickname or IP address in its log, and sends these logs to no third-party service.

Reports

When the other person's answer is reported, a copy of the text, the question number, the language and the date are sent to the team. Nothing says who reported (no link, no IP address). This copy is kept for 30 days, even if the author of the answer deletes their data afterwards, then erased.

The card for stories

The card is drawn on request by the server, with only the answers you choose among your own and the name you write for the card. It is saved nowhere: neither in the database nor on a disk. It never contains an answer or a name of the other person. Once you have published it, it is no longer under our control.

Age

The site is for people aged 18 or older, on a simple declaration (see the terms of use). We do not check age.

Changing this policy

We may change this policy, for example if we add a service. The version in force is the one on this page, with its date. If a change affects what we do with your data, we will tell you before you send your answers.