Privacy Policy

ressource.social ("we", "the service") is committed to protecting your privacy. This policy explains what personal data is collected, why, and what rights you have under the GDPR.

1. Data controller

The data controller is Antoine Martin, operating as a French auto-entreprise. Contact: hello@ressource.social.

Full publisher details (legal notice)

2. What we collect

• Account data: email address, username, optional display name and avatar
• Content you save: bookmarked URLs, folders, tags, comments, reactions, attachments
• Usage data: login times, activity within communities you join
• Technical data: IP address and browser information, used for security and abuse prevention
• Cookies and local storage: strictly necessary items only — Supabase Auth session cookies, language preference, theme preference. No advertising or third-party tracking cookies, and no third-party analytics, are used at this time. If we add analytics later (e.g. Plausible, PostHog), this section will be updated and consent will be requested where required.
• Payment data: when you choose to support the project via Stripe, payment is processed by Stripe directly. We never see or store your card number — we only receive a confirmation that a payment occurred.

We do not sell any data, we do not use any data for advertising purposes, and we do not carry out any automated decision-making or profiling within the meaning of article 22 of the GDPR.

3. Why we use it

• To provide the bookmarking and community features you sign up for
• To authenticate you and secure your account
• To send transactional emails (account confirmation, password reset, notifications you opted into)
• To analyze aggregate usage in order to improve the service
• To comply with our legal obligations

4. Legal basis

We process personal data on the basis of (a) the performance of the contract between you and the service when you have an account, (b) your consent for optional features such as push notifications, and (c) our legitimate interest in keeping the service secure and operational.

5. Third-party processors

We rely on a small number of specialized providers to operate the service:

• Supabase — database, authentication and file storage. Our database is hosted in Supabase's EU region (eu-west); Supabase Inc. is headquartered in Singapore.
• Vercel — application hosting and edge delivery (Vercel Inc. is a US company, with regional edge points of presence).
• Resend — transactional email delivery
• Stripe — payment processing for voluntary contributions

Each provider is bound by their own privacy policy and acts as a data processor on our behalf.

5 bis. International transfers

Some sub-processors (Vercel, Resend, Stripe) are based in the United States. These transfers are framed by the Standard Contractual Clauses adopted by the European Commission and, where applicable, by the providers' certification under the EU-U.S. Data Privacy Framework. A Data Processing Agreement has been signed with each. A transfer impact assessment is available on request at hello@ressource.social.

6. Retention

Your data is kept as long as your account is active. When you delete your account, your personal data and content are removed within 30 days, except where law requires longer retention (e.g. invoicing records for contributions, kept for 10 years as required by French commercial law).

Account deletion instructions

7. Security

We use HTTPS for all traffic, row-level security on the database, and follow reasonable technical and organizational measures to protect your data. No system is perfect — if a breach affecting your data occurs, you will be notified.

8. Your rights

Under the GDPR you have the right to:

• Access your personal data
• Correct or update inaccurate data
• Request deletion of your data
• Receive your data in a portable format
• Object to or restrict certain processing
• Lodge a complaint with the French data protection authority (CNIL — www.cnil.fr)

To exercise any of these rights, contact us at hello@ressource.social. We will respond within 30 days. You can exercise these rights free of charge, and we commit not to degrade the service in any way as a result.

9. Changes to this policy

Substantial changes will be notified to active users by email at least 15 days before they take effect. The effective date at the top of this page is updated whenever the policy changes.

10. Contact

Email: hello@ressource.social — Website: https://www.ressource.social