Privacy
Without an account, Vigie keeps nothing about you: see About. This page says what the site keeps about the people who have an account. Accounts are by invitation.
What is kept
- Your account: the name you chose (not necessarily your real one), the language of the site, the date it was created and the date it was last used.
- Your passkeys: for each, its identifier, its public key, a use counter, whether it is synced across your devices, and the dates it was created and last used. The secret part stays on your device; the site never sees it.
- Your sessions: a fingerprint (SHA-256) of the sign-in token of each device, and its end date. The token itself is only in your browser's cookie.
- Your zones: their name, their shape (a point and a radius, the corners of a drawn zone, a country or an official area) and their rules (level, kinds of alert). A point may be your home: it only serves your alerts and goes with the zone or the account.
- Your invitation: a fingerprint of the code, the note of the person who invited you (for example who it was for) and its dates.
No e-mail address, no password, no IP address in the database. No data is sold, shared, or used for advertising or audience measurement.
Why
To recognise you when you sign in, and to keep what you set in your account. It is the service you ask for by creating the account (legal basis: providing that service).
For how long
- The account: until you delete it, or two years without any use.
- A session: 30 days after it was last used.
- An invitation: 30 days after it expired.
- The check of a passkey in progress: 5 minutes.
- The daily backups of the database: 7 days at most. A deleted account is gone from them within that time.
Cookies
Two cookies, both needed: vigie-session (your sign-in, 30 days, not readable by the page's
scripts) and vigie-lang (the language you chose, one year). The light or dark theme is kept in
your browser, not on the site.
Your rights
From your account, you can download everything the site keeps about you and delete the account: deleting erases the account, its passkeys, its sessions and its zones at once, and the backups forget it within 7 days. You can also complain to the French data protection authority, the CNIL (cnil.fr).
Where
On the site's server, rented from OVHcloud in Beauharnois, Canada. The European Union recognises Canada as giving an adequate level of protection to personal data (Commission decision 2002/2/EC, for businesses).