Privacy policy
In short: we never see the content of your secrets, we use no trackers and we delete everything as soon as possible.
Last updated: 6 October 2026
This text is being reviewed by a lawyer and may still change.
Data controller
KAYZEN — Tarek Belhadj, entrepreneur individuel, 6 rue Pierre Termier, 69009 Lyon. Contact: contact@kayzen-lyon.fr.
What we never see
The content of your secrets, their label, the link key and the PIN stay in your browser. Only an encrypted version reaches us, which we cannot read. The page What the server sees shows it live.
Data processed
| Data | Purpose | Retention |
|---|---|---|
| Encrypted secret, creation and expiry dates, reads left | Providing the service | Until read, expired or destroyed (30 days at most) |
| Secret history (created, read, expired, destroyed) with timestamps | Read receipt for the sender | 30 days after the secret ends |
| Daily, non-reversible fingerprint of the IP address | Abuse prevention (requests per hour) | 24 hours |
| Hosting provider technical logs (IP address, requested page, date) | Infrastructure security and operation | Per the provider’s policy and legal obligations [to be specified] |
Legal basis
Performance of the service you request (GDPR art. 6.1.b) and legitimate interest in protecting the service against abuse (art. 6.1.f).
Cookies and trackers
No advertising cookies, no analytics, no third-party scripts. Your theme preference is stored in your browser only.
Processors
- Vercel Inc. — application hosting. Functions run in Paris (cdg1 region). These companies are established outside the European Union; any transfers are covered by the European Commission’s standard contractual clauses.
- Neon, LLC (groupe Databricks, Inc.) — database and storage. Data hosted in Frankfurt, Germany (AWS eu-central-1 region). These companies are established outside the European Union; any transfers are covered by the European Commission’s standard contractual clauses.
Your rights
You have the rights of access, rectification, erasure, objection and restriction. Since no secret can be linked to a person, most requests can only concern technical logs. Write to contact@kayzen-lyon.fr. You may also contact the CNIL (cnil.fr).