Privacy policy

Data controller

The controller is SAILHAN ANTHONY, sole trader, D60 Résidence Portes d’Estanove, 2500 boulevard Paul Valéry, 34070 Montpellier, France. Data contact: hello@baldoroscope.fun.

Data we process

We process account identifiers, email address, locale, technical country, order data, Stripe references, consent records, security logs, quiz answers, BNW scores, grounding score, badges, generation settings and deliverables.

When you use the contact form, we process the name or nickname, email address, optional phone number and link, subject, language and message content to deliver it to hello@baldoroscope.fun and reply.

For a gift pass, the recipient name or nickname and email are required to bind the invitation to the intended person; the gift message remains optional. The buyer cannot answer for the recipient or access their answers and deliverables.

Purposes and legal bases

Account, order, allocation, generation and delivery are necessary to perform the contract. Accounting and evidence meet legal obligations. Security, abuse prevention and non-advertising improvement rely on legitimate interests, subject to individual rights. Non-essential analytics and advertising trackers rely on consent; this choice is separate from marketing email subscription.

AI-assisted generation

Only quiz answers and scores needed to create the content may be sent to the selected generation provider. Model profiles are predefined server-side. Provider names and API retention or usage settings must be verified and recorded before production. Content rejected by checks is not presented as final.

For each paid provider call, a private trace stores the exact prompt, provider, model and parameters, provider request identifier when supplied, hashes and a short response excerpt, usage, duration and errors. The complete raw response is not duplicated in this trace. Access is limited to service processes and authorised personnel for incident diagnosis, customer support, explaining failures where needed and improving the system.

Recipients, processors and transfers

Depending on enabled features, technical recipients may include Supabase for account and data, Stripe for payments, Vercel for hosting, Resend for transactional email, and Anthropic or OpenAI for generation. Only required data is sent.

Some providers may process data outside the EEA. Transfer grounds, contracts, locations and actual settings must be confirmed in the register before production.

Retention

Deliverables and entitlements are contractually available without expiry, so the account and necessary data are retained while the requested service remains active, unless an erasure request is compatible with our duties. Accounting records and evidence follow legal retention periods. Gift invites expire after twelve months. Technical logs are limited to what is needed.

Exact periods for each table and backup must be approved in the retention register before production.

Cookies, analytics and consent

Mechanisms strictly necessary for account, security and payment may operate without consent when indispensable. Google Tag Manager, Google Analytics, Meta and any non-essential tracker remain blocked until an explicit choice. Refusal must be as easy as acceptance and the choice can later be changed.

Rights and complaints

Where applicable, you may request access, correction, erasure, restriction, objection and portability, or withdraw consent, at hello@baldoroscope.fun. Proportionate identity verification may be required. You may also complain to the CNIL.

Security and access

Deliverables are kept in private storage and served through controlled authorisation. Gift links are single-use. Keys and secrets remain server-side. No system guarantees absolute security; incidents are handled and notified when required by law.