Privacy Policy
Last update: August 7, 2026.
Treatment Officer
Yann Remili, individual entrepreneur TechAtelier, identified under SIRET 108 296 526 00016 and registered at the RCS of Toulon under number 108 296 526, 160 chemin de Coste Florida, 83190 Ollioules, France. For any question or request: contact@techatelier.fr.
Data processed
- Account: name, email address, password minced or Google ID, possible avatar and technical dates.
- Analysis: target, results, scores, alerts and history when the user chooses to keep it.
- Monitoring and advice: areas followed, results, note and message transmitted.
- VPN Requests: formula, usage, country, company and optional message, status, customer ID and private address WireGuard.
- Mobile notifications: terminal notification token and content strictly necessary for Protect/Sentinel alerts when notifications are enabled.
- Technical data: IP address, date, URL, HTTP status, browser and internal events required for statistics, security and diagnosis.
Purposes and foundations
| Purpose | Background |
|---|---|
| Create account and provide requested analytics, surveillance or VPN | Delivery of requested service |
| Respond to requests and send necessary messages to account or VPN status | Service performance and legitimate support interests |
| Prevent abuse, secure systems and diagnose incidents | Legitimate interest of TechAtelier |
| Administering an administrative, accounting or judicial obligation | Legal obligation |
VPN and technical data
Private keys and WireGuard files are not stored in the web portal database. They are generated on the VPN node with restricted accesses. To work, WireGuard nevertheless makes visible to the administrator the assigned private address, the last connection point, the date of the last exchange and the volumes transferred.
TechAtelier does not use traffic content for advertising purposes.
Files analyzed
Files are processed temporarily during analysis and are not intended to be retained. If an account is logged in, history can keep metadata and results, but not file content.
Providers and transfers
- OVHcloud : server hosting and messaging. The location of the service is the one chosen during subscription; contractual data protection commitmentsOVHcloud apply to treatment performed on behalf of TechAtelier.
- Google: only if the Google connection is chosen. TechAtelier then receives the account identifier, e-mail address, name and if any.
- Expo Push Service: when mobile notifications are enabled, TechAtelier forward to Expo the notification token and the contents of the alert necessary for its routing. Expo then relays the notification to the mobile system notification service, including Apple Push Notification Service (APNs) on iOS. This treatment may involve a transfer to the United States; Expo indicates that international transfers are regulated through the Data Privacy Framework and, where necessary, standard contractual terms or other appropriate mechanisms.
No data are sold or rented.
Shelf life
- Account and associated data: during use, then deletion on request subject to legal obligations.
- History of analyses and associated results: 12 months from their creation, unless previously deleted by the user or deleted from the account.
- Surveillance Protect/Monitor: Active configurations are kept during use; measures, surveillance events and resolved risks shall be retained for a maximum of 12 months.
- Notice and feedback: 12 months from the date of transmission, unless previously deleted from the account.
- Active or ongoing VPN requests: for the duration necessary to provide and manage the service. Applications cancelled or refused and their associated data are automatically deleted 12 months after their last update, subject to a legal obligation or a dispute requiring separate retention.
- Check and reset chips: until use or expiry.
- Mobile notification chips: during activation of notifications or until deactivation/deletion with the account.
- Standard technical journals: 14 days. When a journal is extracted as part of a security incident, the strictly necessary elements may be kept separately for the duration justified by the analysis, processing and documentation of the incident.
- Contact Messages: Duration of treatment, then up to 12 months.
Cookies and statistics
Connected spaces use only a session cookie necessary for authentication and security. The internal measurement of the main site works without advertising cookie, persistent identifier and third-party analytics service.
Your rights
You can request access, rectification, deletion or limitation of your data and, when the conditions are met, exercise your rights of opposition and portability. The profile also allows you to request account deletion.
Write to contact@techatelier.fr. Proof of identity will only be requested if there is reasonable doubt. If necessary, you can then enter the CNIL.
Security
TechAtelier applies HTTPS, hashing passwords, access controls, network restrictions, protected backups and a separation between the portal and the VPN node.