Privacy

Data controller

Samouraï Coop, 149 avenue du Maine, 75014 Paris, France, publisher of kodera.io. Contact: hello@kodera.io.

Purpose and legal basis

Your address is used only to confirm your sign-up, then to tell you when Kodera opens. Legal basis: your consent (GDPR article 6(1)(a)), which you confirm from the link we email you. You can withdraw it at any time by unsubscribing.

Data recorded

• your email address;
• the language of the page you signed up on (French or English);
• the state of your sign-up (pending or confirmed), its date and the date of confirmation;
• the number of confirmation emails sent;
• a fingerprint of the current confirmation link and its expiry date, a fingerprint of the unsubscribe link and the random value, specific to your sign-up, used to compute it;
• the date the email announcing the opening was sent, once it has been.

Our database does not record your IP address, your browser or any other data. The logs we have access to are the ones our own application writes: we have checked that they contain neither the connection address nor any confirmation or unsubscribe link. They are kept for 7 days, and the associated technical measurements for 31 days. A limited number of authorised people at Samouraï Coop can read them. Legal basis for these logs: our legitimate interest in the security and operation of the service (GDPR article 6(1)(f)). As for any website, our host may keep its own access logs, which we cannot access and whose retention we do not know.

Abuse protection

To limit abusive sign-ups, the server keeps the IP address each sign-up request comes from (for IPv6, its prefixes) in memory, never recording it, for at most 30 minutes. Legal basis: our legitimate interest in protecting the service (GDPR article 6(1)(f)).

Recipients

Samouraï Coop processes this data with two processors. Scaleway SAS (8 rue de la Ville-l’Évêque, 75008 Paris) hosts the site and its database and sends the emails, in France, in the Paris region. Gandi SAS (63-65 Boulevard Masséna, 75013 Paris) hosts the hello@kodera.io mailbox, and so receives the messages you write to it. No data is sold or passed on.

Scaleway Transactional Email keeps a record of every email sent (recipient, subject, status, date) for 365 days, then deletes it. This retention is set by Scaleway and cannot be changed from our account. In the sending measurements we could inspect, Scaleway keeps the domain of the recipient’s address (for example gmail.com) and an identifier of the email, for 31 days.

How long it is kept

• If you do not confirm, your address is deleted after 7 days. The confirmation link is valid for 48 hours and works once.
• Once confirmed, your address is deleted 30 days after the email announcing that Kodera is open is sent, and at the latest 3 years after you confirmed.
• Every email carries an unsubscribe link: unsubscribing deletes your sign-up at once.
• A deleted address remains in the database backups until they expire, at most 7 days.
• Scaleway keeps its record of each email sent for 365 days, even after we delete your address.

Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, and you can withdraw your consent at any time. To exercise these rights, write to hello@kodera.io. You can also lodge a complaint with the CNIL, the French data protection authority (cnil.fr), and set instructions on the retention, erasure and communication of your data after your death (article 85 of the French Data Protection Act, loi n° 78-17 of 6 January 1978).

Giving your address is not required; without it, we cannot tell you when access opens. No automated decision is made about you.

Cookies

The site sets no cookie, does not use your browser’s local storage and calls no third-party service: no audience measurement, no advertising, no external font. Your browser may cache the site’s files (stylesheet, script, fonts).