In short: no account, no advertising cookies, no analytics, no data sold. We record only what is needed to run Zéphyr, protect it from abuse and improve it.
Data controller
The site's publisher (see the legal notice), who can be reached through the contact form.
What is recorded, and why
- Your questions to Zéphyr and its answers. They are sent to our artificial intelligence provider to produce the answer; under its terms, it does not use them to train its models. We then keep them in our log, without your IP address or any identifier, after automatically masking email addresses and phone numbers. Purpose: spotting mistakes and unanswered questions to improve Zéphyr. Retention: 12 months, then automatic deletion. Please avoid writing personal information anyway.
- An anti-abuse counter. To limit the number of questions and messages per day, your IP address is turned into an unreadable code, computed with a secret key and changing every day. The IP address itself is not stored. The counter is deleted after 7 days.
- The contact form. Your message and, if you provide them, your first name or nickname and your email (only to reply to you). Retention: 12 months at most, then automatic deletion.
- The current conversation stays in your browser and disappears when you close or reload the page.
Legal basis: our legitimate interest in running, securing and improving the site; for the contact form, your request.
Third-party services
- The host (see the legal notice): technical visit logs (IP address, requested page) to run and secure the site.
- An anti-bot service: analyses your IP address and technical browser information to check you're not a bot, before the chat or sending a message.
- The artificial intelligence provider: receives your questions to answer them, as described above.
- A database: stores the log, counters and messages, accessible only by our server.
- Map tiles (OpenStreetMap): when a map is shown, your browser downloads the map images from their servers, which therefore receive your IP address.
The host, the anti-bot service and the artificial intelligence provider are located in the United States. These transfers rely on the safeguards provided by the GDPR (European Commission standard contractual clauses or the EU–US Data Privacy Framework).
Cookies
Zephyr sets no advertising or analytics cookies, which is why there is no cookie banner. The anti-bot service may use elements strictly necessary for its check.
Your rights
You can request access to, correction or deletion of your data, or object to its use, through the contact form. Since the log contains no identifier, tell us the text of your question and the day you asked it so we can find it. You can also lodge a complaint with the French data protection authority, the CNIL.