Privacy policy

Who is responsible

Enfants Particuliers is the controller for personal data used by this website. You can contact us at hello@enfantsparticuliers.com.

What we collect

The public pages work without analytics. If you accept analytics, Google Analytics 4 receives information about visits such as pages viewed, approximate location, device and browser information, referral source and interaction events. We do not use advertising cookies. Analytics does not load on sign-in, invitation, access-request or account-management pages.

For beta access, we collect your name, email address and any optional note. Approved accounts also have a username, a salted password hash, an access status and session records. We do not store your readable password. Limited technical information, including hashed network identifiers, is used to limit abusive sign-in attempts. The editor can see requests and account status, not passwords.

Why we use it

We use account information to review requests, send personal invitations, provide access and protect the guide. This supports our legitimate interests in running a limited beta and preventing unauthorised access. The consent record is necessary to respect your choices. Analytics is processed only with your consent.

Who receives data

Cloudflare provides hosting, server-side account processing and database storage. The editor handles requests and sends invitations through email. Google Ireland Limited provides Google Analytics when you consent. Providers may process data outside the European Economic Area under their applicable data protection safeguards. We do not sell account information.

Password recovery

You can change your password while signed in, or request help using your registered email. Recovery is reviewed by the editor, who manually sends a single-use reset link to that address. We keep the request time, link-issue time, a hashed reset token and security-event records; readable passwords and reset tokens are not stored in the account database. Recovery pages do not load analytics. A request alone does not change your password or access.

How long we keep it

Account and request details are kept while we manage your beta request or provide access. Contact the editor to withdraw a request or delete an account; associated session and approval records can also be deleted. Sign-in sessions expire after 12 hours; unused invitation links expire after 72 hours; password-reset links expire after one hour. Recovery requests are removed when completed, dismissed or the account is deleted; stale requests become unavailable after 30 days and are deleted during account-service cleanup. Expired technical records are cleared during account-service maintenance. Changing or resetting a password invalidates all existing sessions and outstanding reset links.

The browser record of your analytics choice lasts up to 24 months. Analytics retention depends on the property’s configured retention settings; aggregated reports may remain after underlying event data is deleted.

Your choices and rights

You can reject analytics without losing access to the public site, and withdraw consent at any time through Cookie settings. Depending on the circumstances, you may request access, correction, deletion, restriction or portability of your personal data, or object to processing. Email us to exercise a right.

You may also complain to the Spanish Data Protection Agency. Withdrawing consent does not affect processing that occurred before withdrawal.

Children

This guide is not directed at children under 14 and we do not knowingly collect their personal data.

Changes

We may update this notice when the site, its providers or legal requirements change. The date on this page identifies the current version.