Zipkha

Privacy Policy

Last updated: to be completed

1. Data controller

The data controller is [Nom de l'éditeur]. For any question about your data, contact: [contact@votre-domaine].

2. Data we process

Account: name, email address, password (hashed), creation date.

Usage: number of files processed and monthly volume (to enforce quotas).

Technical: security logs (login attempts, timestamps) without sensitive personal content.

Files: your images are processed in your browser and are never sent to us. Your videos are uploaded encrypted, processed, then deleted automatically.

3. Ephemeral file storage

The source file is deleted immediately after processing. The compressed file is made available for a limited time (30 minutes for free accounts, longer for subscribers), then deleted automatically. Nothing is kept long-term.

4. Legal basis and purposes

Service delivery (file compression, account management): performance of the contract.

Security and abuse prevention: legitimate interest.

Subscriptions and billing (upcoming): performance of the contract and legal obligations.

5. Hosting and location

Data is hosted in the European Union. File storage uses Cloudflare R2 configured in the EU jurisdiction. No transfer outside the EU occurs for normal processing.

6. Retention periods

Account: until deleted by the user.

Files: see ephemeral storage (fast automatic deletion).

Processing metadata: automatically purged after 30 days.

7. Your rights

You have the rights of access, rectification, erasure, portability and objection. From your account you can export your data and permanently delete your account. You may also lodge a complaint with your data protection authority.

8. Processors

We rely on technical providers (host, object storage, and eventually a payment provider) bound by data processing agreements (DPAs).