Privacy policy
Last updated
This page explains what personal data this site collects, why, and how to have it deleted. It is deliberately short, because we collect very little.
Who is responsible
The data controller is Paul Guichard, publisher of the site. For any question or request concerning your data: contact@orbiteaffiliates.com.
What we collect
- Waiting list: your email address, and the date you joined.
- Account creation: your email address and your password, the latter kept only as a cryptographic derivation (scrypt) that does not allow it to be recovered. Also the verticals you are interested in, an age bracket and an objective.
- Tracking links: when a link generated in the demonstration is clicked, we record a hashed fingerprint of the IP address, the browser identifier and the timestamp. The IP address itself is not stored in the clear.
- Preferences: two cookies, one for your chosen language (NEXT_LOCALE, one year) and one for the planetary theme of your dashboard (orbite_theme). Neither is used for advertising.
Why, and on what basis
The waiting list exists solely to notify you at launch — that is your consent, which you may withdraw at any time. Click measurement is used to demonstrate that tracking works, on the basis of our legitimate interest in verifying our own product.
Your data is never sold, never rented, and never passed to an advertising network.
Who else sees it
The site and its database are hosted by Railway Corporation in the United States, which entails a transfer outside the European Union.
Our transactional emails — the welcome message, and nothing else for now — are sent by Resend, whose servers we have chosen in Ireland. Resend therefore processes your email address for that sole purpose. No other third party has access, and no one receives your data for advertising.
How long we keep it
Waiting-list addresses are kept until launch, and at most three years after your last contact with us. Click data is kept for thirteen months. Everything is deleted if the project is abandoned.
Your rights
You may ask to access, correct, port or delete your data, and object to its processing. Write to contact@orbiteaffiliates.com and we will respond within one month.
If our answer does not satisfy you, you may lodge a complaint with your data protection authority — in France, the CNIL (cnil.fr).
Security
Account passwords are hashed with scrypt and a per-account salt; sessions travel in a signed, httpOnly cookie. Access to the administration console is separately protected. This remains a pre-launch project: do not entrust it with sensitive information.