Privacy Policy

1. Data collected

When you register and use the platform, we collect the following data:

• Identification data: username, email address
• Login data: encrypted password (bcrypt), date of last login
• Content data: articles, publications, documents you share
• Technical data: IP address, browser type, connection logs

2. Use of data

Your data is used exclusively for:

• Managing your account and providing access to platform services
• Sending notifications related to your activity (new publications, replies)
• Improving platform features
• Security and abuse prevention

Your data is never sold to third parties or used for advertising purposes.

3. Storage & security

Your data is stored on secure servers hosted by PlanetHoster, 4416 Louis-B.-Mayer, Laval, Québec, Canada H7P 0G1. Canada benefits from an adequacy decision (Decision 2002/2/EC), which legitimizes the transfer under Article 45 of the GDPR.

Passwords are systematically encrypted using the bcrypt algorithm before storage. No plaintext password is ever held in our database.

Authentication is managed by JWT tokens with a limited lifespan (1h to 4h), stored in secure cookies and in the browser's local memory.

4. Cookies

We use cookies that are strictly necessary for the site to function, as well as audience analytics cookies. We use no advertising cookies and no third-party trackers for commercial purposes.

4.1 — Wysistat (exempt from consent)

In order to better serve our visitors, we measure the number of pages viewed, the number of visits, visitor activity on the site and the frequency of return, by means of Wysistat, a French audience-measurement service edited by IDfr (Besançon, France), certified by the ACPM (Alliance pour les Chiffres de la Presse et des Médias) and recognised by the CNIL as exempt from consent requirements under its Recommendation on cookies and other trackers (Article 82, French Data Protection Act).

The information collected is anonymous: only the first three octets of the IP address are retained (yielding an approximate departmental-level location only); no personal identifier (e-mail, user ID, name) is transmitted; no cross-site tracking is performed; and the data is hosted exclusively in France. Raw data is kept for a rolling 4-month period and then aggregated.

If you do not wish to be measured or wish to exercise your right to retraction, you may either follow the procedure described on the Wysistat website, or use the opt-out form below directly:

4.2 — Google Analytics (consent-based)

Google Analytics 4 cookies collect anonymised browsing data (pages visited, duration, origin) to help improve the user experience. This data is never cross-referenced with your personal data and is used for no advertising purpose. These cookies are deposited only after your explicit consent through our cookie banner, in accordance with the GDPR and Consent Mode v2.

5. Your rights

In accordance with the GDPR, you have the following rights:

• Right of access: obtain a copy of your personal data
• Right of rectification: correct inaccurate data
• Right to erasure: request deletion of your account and data
• Right to portability: receive your data in a readable format
• Right to object: object to certain processing activities

To exercise these rights, contact us: Via the contact form

6. Third-party sharing

Digital Synapse Exchange does not share your data with any third party for commercial purposes. The only possible sharing concerns legal obligations (judicial requisitions) or platform security.

7. Contact

For any questions regarding this policy or to exercise your rights, you may contact us:

• Email: Write to us by email
• Address: 6 Cours Voltaire, 83190 Ollioules, France