Privacy policy

1. Controller

[TO COMPLETE : name of the publisher (person or company)], [TO COMPLETE : postal address of the publisher]. Contact for personal data: ferme.layadi@gmail.com.

2. Data processed and purposes

Account: e-mail address, display name, language, password (kept only in hashed form), country and city if you give them. Purpose: create and manage your account.

Profile and content: recipes, photographs, comments, favourites, follows, according to the visibility you choose. Purpose: provide the service.

Private messages, when that feature is open. Purpose: allow exchanges between members.

Security: sign-in sessions (token fingerprint, type of browser, dates), security events recorded without e-mail address, without IP address and without browser identifier, rate limiting of requests. Purpose: protect accounts and prevent abuse.

Recipe measures: for signed-in members only, impressions, views and “I made it” entries, shown to authors in aggregated form with privacy thresholds. Purpose: statistics for authors.

Service e-mails: address verification, password reset, security notices. A delivery failure is recorded without address or content.

Audience statistics, only if you accept them: pages viewed (address without parameters), type of device and browser, approximate country and Google Analytics cookie identifiers; never your e-mail address, your name or your account identifier. Purpose: understand which pages are read. Kept by Google Analytics for at most 14 months [setting to be applied in Google Analytics].

Proof of acceptance: at registration, the version and date of the terms of use accepted, the confirmation of your age and, if you ask for it, your optional consent to news by e-mail; a withdrawal is recorded as a new entry. Purpose: being able to show what you accepted. Kept: as long as the account exists, then for the applicable limitation period [duration to be validated by the lawyer]. No IP address is kept in it.

3. Legal bases (to be validated)

Performance of the contract (account, content, messages), legitimate interest (security, abuse prevention, aggregated statistics) and the legal obligations of the publisher and the host. Audience statistics rely on your consent, which you can refuse or withdraw at any time; there is no advertising and no commercial profiling.

4. Recipients and processors

Hosting: [TO COMPLETE : name of the hosting provider]. Photographs are stored on the host's server, the same one that runs the site, not with a separate storage provider. Service e-mails: sent through an e-mail provider chosen by the publisher; some account data may be kept outside the European Union by this provider. With your agreement only, audience statistics are processed by Google (Google Ireland Limited, Google LLC).

Data is neither sold nor passed on to third parties for advertising.

5. Transfers outside the European Union

The e-mail provider may keep some account data outside the European Union. Safeguards: [TO COMPLETE : safeguards for the transfer of account data to the e-mail provider outside the EU] Audience statistics, if you accept them, are sent to Google, which may process them in the United States (Google LLC takes part in the EU-US Data Privacy Framework). [To be validated by the lawyer.]

6. Retention

Account: kept as long as it exists; at your request it is closed (reversible) then erased (irreversible, at the earliest 30 days after closing); the public handle is then reserved for 90 days. [Durations to be validated.]

Sessions: closed after 7 days of inactivity or 30 days at most. Export archives: 7 days. Feed personalisation measures: 90 days. Records of e-mail delivery failures (without address): 90 days.

Web server technical logs: [TO COMPLETE : retention of the web server's technical logs]. Backups: [TO COMPLETE : retention of backups].

7. Your rights

You have the right of access, rectification, erasure, restriction, objection and portability. In your account, “My data” prepares an export of your data. For closing or erasing your account and for any other request, write to ferme.layadi@gmail.com: we reply within one month.

You may also lodge a complaint with the data-protection authority of your country (in France, the CNIL: www.cnil.fr).

8. Cookies

The Site uses a session cookie when you are signed in, a language-preference cookie and a cookie that remembers your choice about statistics (about six months). Only if you accept, it loads Google Analytics 4, which sets audience-measurement cookies (_ga and _ga_…, up to two years): pages viewed without their parameters, never an e-mail address or an account identifier, no advertising, no profiling. You can refuse, and withdraw your consent at any time with “Cookie preferences” at the bottom of every page; refusing changes nothing about using the Site. No advertising or social-network cookie. [To be validated by the lawyer.]

9. Security

Passwords are kept in hashed form; the connection to the Site is encrypted; access to the administration requires two-factor authentication; access to data is limited to the people and tools that need it.

10. Children

The Site is for people aged at least [TO COMPLETE : minimum age to create an account]; you confirm it when you register.

11. Changes

This policy may change; the current version and its date are at the top of this page.