Privacy policy
Translation provided for information: should they differ, the French version prevails. Version française
This page explains, in plain terms, what personal information the site collects, why, how long it keeps it and who has access to it. The site collects little: no name, no postal address, no card number.
Person in charge of the protection of personal information
Person in charge of the protection of personal information,
9577-7983 Québec inc.,
300-204, rue du Saint-Sacrement
Montréal (Québec) H2Y 1W8
Canada
For any question or request, write through the contact form, with the subject "Privacy".
What is collected, why, and for how long
| Information | Why | Kept for |
|---|---|---|
| Email address and chosen language | Sign-in by link, account, receipts, account security notices, answers to your requests | As long as the account exists |
| A fingerprint of your password, if you choose one (never the password itself) | Signing in without waiting for an email | As long as the account exists, or until you remove it |
| If you turn on two-step verification: the secret key shared with your authenticator app, and a fingerprint of your backup codes (never the codes themselves) | Checking the code asked at each sign-in | Until you turn it off, or the account is deleted |
| Purchases (pack, amount, currency, dates, acceptance of the terms and of the waiver of the right of withdrawal) | Invoicing, proof of the order, refunds | 6 years after the end of the financial year of the purchase, even if the account is deleted, as the law requires for the accounting records |
| Credits and their movements | Keeping the account's balance | As long as the account exists |
| Referrals: the account that invited you, or those you invited | Giving the credits due; your address is never shown to the other | As long as the account exists |
| Decks you share (their public page) | Showing them to whoever has the link you give; the page is not offered to search engines | Until you stop sharing, or the account is deleted |
| Generation requests (channels, words, settings), slides, word groups, rules and notes | Providing the service, account history | As long as the account exists |
| Channel requests | Fetching the channel and telling you | Refused: 24 hours. Added: as long as the account exists |
| IP address on each page | Showing prices in your country's currency: the country is read in a database installed on the server, with no outside service | Not kept for this |
| A fingerprint of the day: your IP address and browser, scrambled with a secret key that changes every day; the names of the pages seen and the country | Counting the different visitors of each day and the pages most seen, by country | The key is erased the next day: the fingerprint no longer leads to anyone, nor links two days. The counts: 1 year |
| IP address for a free preview | Preventing abuse | 1 hour |
| Free previews | Showing them to you | 7 days |
| Sign-in links | Signing you in | Valid 15 minutes, deleted within 24 hours |
| Sign-in session, and for its last page: the time (to the minute), the IP address and the country it gives | Staying signed in; knowing who is using the site when it is updated; the account's security (an unexpected sign-in shows) | Until signing out, 30 days at most |
| History of your sign-ins: for each, its time, the IP address and country of its first and last page, the type of device and browser (for example "iPhone · Safari"), and how it ended | The account's security (an unexpected sign-in shows, even once ended); help when something goes wrong | 1 year after the sign-in ended |
| Message sent through the contact form (email address, text, IP address and the country it gives; if you are signed in, your account's number and address) | Answering you | 1 year, then deleted |
| Email sent to the support address shown on your receipt (email address, text, technical headers, sometimes including the IP address your email service adds to them, and the country it gives) | Answering you | 1 year, then deleted |
| Server logs (IP address, page asked for, time, when an error occurs; addresses of the emails sent) | Security, diagnosing failures | 7 days, then erased |
| Backups of all the above | Restoring the service after a failure | 30 days |
The site does not profile you, and sells or transfers no information.
Legal basis, for visitors from the European Union: performance of the contract (account, purchases, generation), legal obligations (accounting) and legitimate interest (security, preventing abuse).
Deleting your account
You may ask for your account to be deleted through the contact form. Not everything is erased at once: the backups keep your information for up to 30 days, until they are replaced, and purchases are kept for 6 years after the end of the financial year, for the accounting.
Who has access to it
- The host: the site, its database and its mailbox are on a server rented from OVHcloud, located in Québec (Beauharnois). The site's emails leave from this server, through no third-party sending service.
- Stripe and its affiliate Sold through Link, LLC, merchant of record of the purchases, in the United States: they receive what the payment needs, which you type on their page (card, country, billing address, email). The site never sees your card number.
- Cloudflare, in the United States: all of the site's traffic goes through its network, for security and to deliver the pages. It sees your IP address, your browser, the pages you visit and the content of the exchanges, forms included. On the sign-in and contact forms, and for a free preview asked without an account, its bot-protection service (Turnstile) also checks that the request comes from a person. The site uses it for no script-based audience measurement and no advertising.
Cookies and local storage
The site only uses functional cookies: a session cookie, needed to stay signed in, and a cookie remembering the chosen language. The browser's local storage remembers the chosen theme and the form being filled in. No audience measurement, no advertising, no cookie that identifies, locates or profiles you: no consent is therefore asked for.
If you arrive through a customer's invitation link, its code stays in the address of the site's pages you visit, until you sign out or leave the site, so that the account you create counts as invited by them. No cookie is used for this.
Your rights
You may ask to access your information, to have it corrected or erased, or for a copy of it, through the contact form with the subject "Privacy". We answer within 30 days. You may also file a complaint with the Commission d'accès à l'information du Québec (www.cai.gouv.qc.ca), or with your own country's data protection authority.
Should the versions differ, the French version prevails.
Last updated: 2026-10-25.