Privacy policy

Last updated: [À COMPLÉTER : date de mise à jour]

This is a translation of our politique de confidentialité. If the two versions differ, the French version prevails.

Who is responsible for your data

[À COMPLÉTER : nom ou raison sociale de l'éditeur] , publisher of the site, who can be reached at [À COMPLÉTER : email de contact] .

What we collect and why

Your account

Your email address and your sign-in dates, so you can sign in with a magic link and use your credits. Legal basis: performance of the service you request. Retention: until your account is deleted, or [À COMPLÉTER : durée d'inactivité au bout de laquelle le compte est supprimé] .

Your designs

The description you type, the options you choose and the generated images, so we can show your history. Legal basis: performance of the service. Retention: until you delete them. After deletion, we only keep technical information about the generation (date, provider, cost, status), without the text or the images, to track our costs.

Your description is sent to an artificial intelligence text provider, which checks that it follows our rules and rewrites it for the image model, then to an image provider.

Your credits

The history of credits received and used. Legal basis: performance of the service. Retention: as long as your account exists.

2D photo try-on

Your photo stays on your device: the try-on happens entirely in your browser and the photo is never sent to our servers.

AI photo try-on

If you choose the realistic AI render, your photo and the design are sent to our image provider to create the render. We only do this with your explicit consent, given by ticking a box before each upload. A photo of your skin can reveal information about your health: only upload what you are willing to share.

• We remove the photo's metadata (including its GPS location) before sending it.
• The original photo is deleted from our servers right after processing, whether it succeeds or not. If processing could not take place, it is deleted at the latest one hour after the upload.
• We keep the date of your consent and the version and language of the text you accepted, as proof.
• The resulting render is kept in your account until you delete it.
• The provider may keep the photo for a limited time under its own policy: [À COMPLÉTER : durée de conservation chez le fournisseur, à vérifier dans son accord de traitement des données] .
• The provider processes data outside the European Union: [À COMPLÉTER : pays et garanties du transfert, par exemple Data Privacy Framework ou clauses contractuelles types] .

You can withdraw your consent at any time, for future uploads.

Audience measurement

We measure traffic with our own tool, designed not to track you: no cookie or storage on your device, and no IP address kept in clear. For each page view, we record the page, the site you came from, the type of device and an anonymous visit identifier.

This identifier is computed from your IP address and your browser, mixed with a random value that changes every day. That value is destroyed after 48 hours: after that, a visit can no longer be linked to an IP address. Bots are not counted. Legal basis: our legitimate interest in knowing how the site is used. Retention: 25 months.

Security and abuse prevention

To limit abuse (mass sign-ups, automated traffic), we use a hashed version of your IP address, never your address in clear. Legal basis: legitimate interest. Retention: 48 hours at most.

Who receives your data

• Hosting: [À COMPLÉTER : nom de l'hébergeur]
• Image generation: [À COMPLÉTER : nom, entité juridique et pays du fournisseur d'images retenu]
• Text generation: [À COMPLÉTER : nom, entité juridique et pays du fournisseur de texte retenu]
• Email delivery: [À COMPLÉTER : nom et pays du service d'envoi d'emails]

We do not sell your data and do not use it for advertising.

Cookies

The site only uses cookies that are strictly necessary for it to work:

• culture-tatouage-session: keeps your session open.
• XSRF-TOKEN: protects forms against fraudulent submissions.
• remember_web_59ba36addc2b2f9401580f014c7f58ea4e30989d: only set if you sign in, it keeps you signed in between visits, until you sign out.

These cookies do not require your consent. If we ever add a non-essential cookie, we will ask for your consent before setting it.

Your rights

You can access, correct or delete your data, restrict or object to its processing, or request a copy of it, by writing to [À COMPLÉTER : email de contact] . If you believe your rights are not respected, you can file a complaint with the CNIL, the French data protection authority (cnil.fr).