Privacy policy

Controller

The controller is Datatoy, 13 rue Parrot, 75012 Paris, France. Contact: gabriel@datatoy.fr.

Google Analytics

Google Analytics 4 (measurement ID G-63T7EQWDCL) is loaded on every page, except on localhost and 127.0.0.1. It sets Google Analytics cookies (_ga, _ga_<id>) and sends page views, approximate location, device and browser data to Google.

See how Google uses information from sites that use its services, and the Google Analytics opt-out add-on.

Cookies

A first-party donor cookie stores a random identifier. It is HttpOnly, SameSite=Lax, and lasts about 400 days. It is used only to group your donations into one total for the ranking.

The Google Analytics cookies above are also set. There are no advertising cookies.

Data you type

The percentile calculators run in your browser. The amounts typed there are not sent to our server, not stored, and not sent to Google Analytics.

The donation amount entered in the form is sent to our server to create a Stripe Checkout session.

When the payment is recorded, we store the Stripe session id, the payment intent id, the amount, the amount set aside for charity, the currency, the date, and the donor identifier. The donor identifier is the donor cookie id. If it is missing, the email address Stripe returns is used as the identifier. No card data reaches us.

Payments

Payments are handled by Stripe (Stripe Payments Europe / Stripe, Inc.) through Stripe Checkout. Stripe collects card details and email under its own privacy policy. Refunds reported by Stripe update the stored amount and the amount set aside for charity. A full refund removes the record.

Hosting

The site is hosted on Google Cloud (europe-west1, Belgium). Technical logs (IP address, user agent, requested URL) are processed for security and debugging.

Legal bases

Under the GDPR, payments are processed for a contract, or for steps taken at your request. Security logs and audience measurement rely on legitimate interest.

Your rights

You can request access, rectification, erasure, objection, restriction, or portability by email to gabriel@datatoy.fr. You can also complain to the CNIL.

Retention

Payment records are kept as long as needed for the ranking and for accounting obligations.