Legal
Privacy policy
What we hold, why, and for how long — in plain language.
We hold only what we are legally required to keep, and for no longer. The Transparency page describes our practices in plain language.
Data not collected
- No visitor IP address logs.
- No analytics, third-party trackers or advertising.
- No external fonts or CDNs.
Data collected
- Shipping address: necessary for delivery, encrypted at rest, decrypted only to print a label.
- Email: optional; used to send a tracking link, then purged.
- Invoices: retained for the legally required period (French commercial code), then no longer.
Infrastructure
- Cloudflare is used for DNS only and does not proxy or see your traffic to the site.
- Payment is in Monero, which leaves no public on-chain link between sender and receiver.
Fingerprint correlation demo (opt-in)
The /empreinte page offers an explicit, opt-in demo that shows how a tracker could link your browsers and devices. It sends nothing unless you turn it on. With your consent (the ePrivacy Art. 5(3) basis), it derives a coarse network prefix from your request — IPv4 /24 or IPv6 /64, never your full IP — and stores salted hashes of a few hardware signals, keyed to a 72-hour demo cookie. This reconciles with our no-access-log posture: we keep no server access logs; this consented demo derives a coarse prefix only.
- Stored in an isolated, memory-only store (separate service, separate credentials), never the shop database — no link to any customer or order.
- Auto-deleted after 72 hours; no backups, no archive, no sharing, no profiling or advertising. Salted with a daily-rotated salt.
- You can delete all of it immediately from the result screen (Art. 17 right to erasure is trivially met — it is your own data, shown back to you).
Your rights
You may request access to, correction of, or deletion of the limited data we hold, subject to legal retention obligations. Contact us encrypted via the Contact page.