Privacy policy

Who is responsible

Enfants Particuliers is the controller for personal data used by this website. You can contact us at hello@enfantsparticuliers.com.

What we collect

This site does not load analytics or advertising tools. Our related site, Particuliers Guide, has its own analytics choices and privacy notice.

Enfants Particuliers and Particuliers Guide use the same account database. Requests, approvals and password recovery are managed through Particuliers Guide. For beta access, we collect your name, email address and any optional note. Approved accounts also have a username, a salted password hash, an access status and session records. We do not store your readable password. Limited technical information, including hashed network identifiers, is used to limit abusive sign-in attempts. The editor can see requests and account status, not passwords.

Why we use it

We use account information to review requests, send personal invitations, provide access and protect private profiles. This supports our legitimate interests in running a limited beta and preventing unauthorised access.

Who receives data

Cloudflare provides hosting, server-side account processing and database storage. The editor handles requests and sends invitations through email. Providers may process data outside the European Economic Area under their applicable data protection safeguards. We do not sell account information.

Password recovery

You can change your password or request recovery through your account on Particuliers Guide. Recovery is reviewed by the editor, who manually sends a single-use reset link to that address. We keep the request time, link-issue time, a hashed reset token and security-event records; readable passwords and reset tokens are not stored in the account database. Recovery pages do not load analytics. A request alone does not change your password or access.

How long we keep it

Account and request details are kept while we manage your beta request or provide access. Contact the editor to withdraw a request or delete an account; associated session and approval records can also be deleted. Sign-in sessions expire after 12 hours; unused invitation links expire after 72 hours; password-reset links expire after one hour. Recovery requests are removed when completed, dismissed or the account is deleted; stale requests become unavailable after 30 days and are deleted during account-service cleanup. Expired technical records are cleared during account-service maintenance. Changing or resetting a password invalidates all existing sessions and outstanding reset links.

Your choices and rights

Depending on the circumstances, you may request access, correction, deletion, restriction or portability of your personal data, or object to processing. Email us to exercise a right.

You may also complain to the Spanish Data Protection Agency. Withdrawing consent does not affect processing that occurred before withdrawal.

Children

This site is not directed at children under 14 and we do not knowingly collect their personal data.

Changes

We may update this notice when the site, its providers or legal requirements change. The date on this page identifies the current version.