Privacy

Data controller

The data controller is Florian Bezagu, 90 rue Charles Longuet, 44600 Saint-Nazaire, France. For any question about your data: phare.in@atelierbleuiode.fr.

Our principle

Phare is built to count without tracking. We collect only what is strictly necessary to run the service, and nothing else: no data resale, no advertising profiling, no ad network.

Account data

For page creators (on app.phare.in), we process:

• email address, username, display name, bio and avatar;
• your password, stored only as a hash (argon2id), never in clear text;
• your page content: links, theme, settings.

Purpose: to provide the service and manage your account. Legal basis: performance of the contract (our terms of use). The emails we send (verification, reset, welcome, notifications) are strictly transactional.

Visitors to public pages

The phare.in/username pages set no cookies and store nothing in the visitor's browser. For anonymous statistics, we record per visit:

• a non-reversible daily fingerprint (a hash of the IP address, the browser and a secret salt rotated every day); the IP address itself is never kept;
• the domain of the referring site (never the full URL);
• the device type, browser, operating system and country.

These statistics cannot identify a person. Raw events are automatically purged after 12 months.

Cookies

A single, strictly necessary session cookie is used on app.phare.in to keep you signed in to the dashboard. No audience-measurement cookie and no third-party cookie on user pages.

Marketing site analytics

The marketing site may use a privacy-respecting analytics tool to understand its traffic. User public pages never use one.

Recipients and processors

Your data is processed by Phare and by a limited number of technical processors acting on our instructions: the host (servers in Europe) and a transactional email provider. We do not sell or rent your data to third parties.

Hosting and transfers

Your data is hosted on servers located in Europe. We favour providers established in the European Union.

Your rights

Under the GDPR, you have the right to access, rectify, erase, port, restrict and object. From your account, at any time: a full export of your data in JSON and permanent deletion of your account and associated data. For any other request: phare.in@atelierbleuiode.fr.

Complaint

You may lodge a complaint with your data protection authority (in France, the CNIL, cnil.fr).

Security

Passwords are hashed with argon2id, traffic is encrypted over HTTPS and data access is strictly limited. No measure is foolproof, but we apply the state of the art.