Privacy policy

Data controller

Thibaut Delaunay, [À compléter : adresse postale]. For any question about your data: privacy@discrema.com.

Data we process

• Account: email address, username, password (stored as an irreversible hash), preferred language, email confirmation date.
• Shop (if you publish): shop name, description, location and links you choose to make public.
• Content: the models, images, files and descriptions you publish.
• Activity: liked models, followed creators, download history, sign-in dates.
• Reports: email address, optional name and the explanations provided.
• Technical data: IP address and date of sign-up, of each sign-in and of each model creation or change, which the law requires us to keep, and which we use for security and abuse prevention.

We do not ask for your real name. It is never shown publicly.

Why we process it

• Providing the service (account, downloads, favorites, follows, publishing) — performance of the contract.
• Sending account-related emails (email confirmation, password reset, moderation decisions) — performance of the contract.
• Keeping the service secure, preventing abuse and moderating content — legitimate interest and legal obligations (LCEN, DSA).
• Keeping connection data for the period required by law — legal obligation.

We do not sell your data or use it for advertising.

Retention periods

• Account: as long as it is active. After two years without signing in, you are warned by email, then the account is anonymized.
• Connection data and content log (IP address, dates): one year, as required by French decree no. 2021-1362 of 20 October 2021, then automatic deletion.
• Reports and moderation decisions: two years after the decision.
• When an account is deleted, its identification data is erased or anonymized. Its published models are removed from the catalog.

Recipients

Your data can be accessed by the site team, within the limits of its duties, and by our technical providers acting on our instructions:

• Hosting: OVH SAS
• File and image storage: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (Cloudflare R2, EU)
• Email delivery: Brevo (Sendinblue SAS), 106 boulevard Haussmann, 75008 Paris, France
• Domain name and image delivery: Cloudflare, Inc. (DNS, CDN)
• Audience measurement, only with your consent: Google Ireland Limited (Google Analytics)

If one of these providers processes data outside the European Union, the transfer is covered by appropriate safeguards (adequacy decision or the European Commission’s standard contractual clauses).

Your rights

You have the right to access, rectify, erase, restrict and port your data, the right to object, and the right to set instructions about your data after your death. You can change most of your information and delete your account from your account settings, or write to us at privacy@discrema.com.

If you believe your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or with the authority of your country.

Cookies

The cookies used by the site are described in the cookie policy.