Privacy policy

Who is responsible

ATTARIKH is an independent project. For any question about your data, contact us at contact&support@attarikh.fr.

What we collect

Only what an account needs: your first and last name, email address, an optional phone number, and a securely hashed password (we never store it in clear text). If you use the quiz, we store your progress (XP, scores, badges). If you save favourites, we store the entities you starred.

Technical data: a single session cookie keeps you signed in, and we briefly log the IP address and browser of your sessions to protect the account.

Why we use it

To create and secure your account, save your favourites and quiz progress, and send essential emails (verification, password reset). The legal basis is the performance of our service to you; product news is sent only with your consent (the opt-in box), which you can withdraw anytime.

Cookies

We use one strictly necessary cookie to keep you signed in. We do not use advertising or third-party tracking cookies.

We keep anonymous, aggregate visit counts (page views, daily unique visitors) to understand overall usage. This uses no cookies and stores no raw IP addresses, only a daily-rotating, irreversible hash.

Who we share with

We do not sell your data. We rely on a few providers strictly to run the service: our hosting provider (to store the database) and an email provider (to deliver account emails). The map itself loads tiles and fonts from OpenStreetMap/CARTO and OpenMapTiles, which do not receive your account data.

Our current sub-processors are: Render (hosting, USA), our SMTP email provider, and Lemon Squeezy (payments, if you subscribe). Lemon Squeezy acts as Merchant of Record: it is the seller for the transaction and processes your payment details directly under its own privacy policy. We only receive your subscription status, plan and renewal date, never your card number.

How long we keep it

We keep your account data for as long as your account exists. Sessions expire after 30 days. When you delete your account, all of your data is erased immediately and permanently.

Your rights

You can access, correct, export or delete your data. You can edit your details and delete your account at any time from "My information" in the account menu. For any other request, or to object or withdraw consent, email us. You also have the right to lodge a complaint with your local data protection authority.

Security & children

Passwords are hashed, traffic is encrypted over HTTPS, and access is rate-limited. The service is not directed at children under 16; if you believe a child has registered, contact us and we will remove the account.

Changes to this policy

We may update this policy as the app evolves. The date below shows the latest revision.