Privacy Policy

1. Data collected

When you register and use the platform, we collect the following data:

• Identification data: username, email address
• Login data: encrypted password (bcrypt), date of last login
• Content data: articles, publications, documents you share, negotiation records and their associated audit logs
• Technical data: IP address, browser type, connection logs and administration logs

2. Use of data

Your data is used exclusively for:

• Managing your account and providing access to platform services
• Sending notifications related to your activity (new publications, replies)
• Improving platform features
• Security and abuse prevention

Your data is never sold to third parties or used for advertising purposes.

Each processing activity rests on a legal basis: performance of the contract for account management and access to services; legitimate interest for platform security and abuse prevention; your consent for consent-based audience measurement cookies.

3. Storage & security

Your data is stored on secure servers hosted by PlanetHoster, 4416 Louis-B.-Mayer, Laval, Québec, Canada H7P 0G1. Canada benefits from an adequacy decision (Decision 2002/2/EC), which legitimizes the transfer under Article 45 of the GDPR.

Passwords are systematically encrypted using the bcrypt algorithm before storage. No plaintext password is ever held in our database.

Authentication is managed by JWT tokens with a limited lifespan (1h to 4h), stored in secure cookies and in the browser's local memory.

4. Cookies

We use cookies that are strictly necessary for the site to function, as well as audience analytics cookies. We use no advertising cookies and no third-party trackers for commercial purposes.

4.1 — Wysistat (exempt from consent)

In order to better serve our visitors, we measure the number of pages viewed, the number of visits, visitor activity on the site and the frequency of return, by means of Wysistat, a French audience-measurement service edited by IDfr (Besançon, France), certified by the ACPM (Alliance pour les Chiffres de la Presse et des Médias) and recognised by the CNIL as exempt from consent requirements under its Recommendation on cookies and other trackers (Article 82, French Data Protection Act).

The information collected is anonymous: only the first three octets of the IP address are retained (yielding an approximate departmental-level location only); no personal identifier (e-mail, user ID, name) is transmitted; no cross-site tracking is performed; and the data is hosted exclusively in France. Raw data is kept for a rolling 4-month period and then aggregated.

If you do not wish to be measured or wish to exercise your right to retraction, you may either follow the procedure described on the Wysistat website, or use the opt-out form below directly:

4.2 — Google Analytics (consent-based)

Google Analytics 4 cookies collect anonymised browsing data (pages visited, duration, origin) to help improve the user experience. This data is never cross-referenced with your personal data and is used for no advertising purpose. These cookies are deposited only after your explicit consent through our cookie banner, in accordance with the GDPR and Consent Mode v2.

5. Your rights

In accordance with the GDPR, you have the following rights:

• Right of access: obtain a copy of your personal data
• Right of rectification: correct inaccurate data
• Right to erasure: request deletion of your account and data
• Right to portability: receive your data in a readable format
• Right to object: object to certain processing activities
• Right to lodge a complaint: file a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, 75007 Paris, or at cnil.fr

To exercise these rights, contact us: Via the contact form

6. Third-party sharing

Digital Synapse Exchange does not share your data with any third party for commercial purposes. The only possible sharing concerns legal obligations (judicial requisitions) or platform security.

7. Retention periods

Your data is not kept indefinitely. Each category has a defined retention period, after which deletion is automatic.

Negotiation records constitute a documentary exhibit with evidential value: they are kept for twelve months after the session closes, then deleted together with all their annexes. Each participant may download their copy at any time during that period; beyond it, Digital Synapse Exchange retains no trace of it.

The administration action log records the identifier, email address, IP address and timestamp of every account blocking or deletion. Its purpose is evidential: to establish that a requested deletion was actually carried out. It is kept for twelve months, then purged automatically.

Deleting your account immediately erases your articles, galleries, media, files, folders, messages and discussions, both in the database and on disk. If you manage a group with other members, you will be asked to transfer its management beforehand, so that their content is not removed along with your account.

8. Contact

For any questions regarding this policy or to exercise your rights, you may contact us:

• Email: Write to us by email
• Address: 6 Cours Voltaire, 83190 Ollioules, France