This policy describes the use of trackers, pursuant to Article 82 of French Act No. 78-17 of 6 January 1978 as amended. It distinguishes the public website stealed.io from the platform accessible after authentication, whose uses differ.
The public website sets no analytics tracker, no advertising tracker and no social network tracker. It embeds no ad network, no tracking pixel and no behavioural analytics tool. No profiling is carried out from your browsing of the website.
That is why no consent banner is shown to you: with no tracker subject to consent, such a banner would serve no purpose. Should this change, a consent mechanism would be put in place beforehand and this policy would be updated.
Server and edge protection logs record connection data such as IP address and timestamp, for security and availability purposes. That processing does not rely on a tracker stored on your device and rests on the legitimate interest in securing the service.
Access to the platform requires an account. The following trackers are used there:
| Purpose | Nature | Consent |
|---|---|---|
| Authentication and session maintenance | Strictly necessary tracker, set by our authentication provider | Not required, exempt under Article 82 |
| Security, abuse prevention and load balancing | Strictly necessary tracker, set by our edge protection provider | Not required, exempt |
| Display preferences (language, interface) | Local storage, strictly necessary for the requested service | Not required, exempt |
| Usage analytics and product improvement | Analytics tracker, hosted in the European Union, data not shared with third parties for advertising purposes | Required, collected within the platform |
Usage analytics covers how our customers' users interact with the application: pages viewed, features used, errors encountered. It covers no leak data.
You may configure your browser at any time to refuse trackers or delete those already set. Refusing strictly necessary trackers prevents use of the platform, since authentication depends on them.
Trackers subject to consent may be refused with no consequence for access to the service or its features.
Analytics trackers and the resulting data are retained for no longer than thirteen months, with no automatic extension on a new visit. Authentication trackers last for the session or for the period needed to maintain the connection, within the limits set by our authentication provider.
The providers concerned, their role and their location are listed on the Sub-processors page. Personal data processing is described in the privacy policy. Any question may be sent to [email protected].