Privacy

QuiVad sets no cookie, shows no advertising and allows no account to be created. Only two things touch your browser: the list of companies and funds you follow, if you follow one, kept in its local storage (localStorage) to find it again on your next visit, and the anti-robot check of the alert form, described below.

What is measured

No audience measurement script is loaded on this site. You are given no identifier, and nothing here can follow you from one site to the next.

What remains, and no site can remove it, is the host counting the requests it serves, as for any site.

What the publisher reads from it is a number of pages requested, a country and a browser type, aggregated. No line describes a person, and it serves only to know what is read here.

What is processed

The network that serves the site, Cloudflare, an American company, and its server, rented from OVH SAS in Gravelines, keep technical connection logs, as every web server does: IP address, date, page requested. Each keeps them for the period it applies, and those of Cloudflare may be processed outside the Union, under the standard contractual clauses of its data processing agreement. These logs serve the security and the correct operation of the service, and the publisher reads from them an aggregated count of what is read here, for its own use alone. These logs hold your IP address, which is personal data; they are matched with nothing, no advertiser has access to them, and they are not passed to third parties. Legal basis: the publisher's legitimate interest in protecting and running the site (Article 6(1)(f) GDPR).

Apart from these logs, the email alert and the anti-robot check, described below, the site collects no personal data. The terms you type into the search are sent to the server to build the answer and are not kept.

If you ask for the mail alert

Legal basis: your consent (Article 6(1)(a) GDPR), given by the confirmation and withdrawn by unsubscribing. Here is all that is kept for the alert: your address, the list of companies and funds you named, the language to write to you in, the domain you subscribed from, the date of your request and a random token.

What is not kept: your IP address, your browser, your name, no open pixel, no link rewriting, and nothing that says what you have read. There is no password and no account: the link you receive by mail is the only key, and it is enough to stop everything.

A confirmation message is sent to the address entered and nothing else is sent to it until it answers. With no answer, the row is deleted after forty-eight hours. The unsubscribe link in every message deletes the row rather than flagging it.

To keep robots out, the alert form loads Cloudflare Turnstile when you start filling it in, and only then. This check receives your IP address and signals from your browser, without a cookie, and only says whether the request comes from a person. Legal basis: the publisher's legitimate interest in not letting a robot sign up someone else's address (Article 6(1)(f) GDPR). The confirmation link opens a page with a button: nothing is confirmed until you press it.

Delivery is handled by Cloudflare, an American company, and by Resend, an American company, only when Cloudflare refuses a message. Your address does leave the Union, under the standard contractual clauses signed with these providers. The previous provider was French, but it added an open pixel to every message. QuiVad left it for that reason. For any question, write to [email protected].

Your rights

You may ask for access to your data, its correction or its erasure, object to processing based on legitimate interest, and lodge a complaint with the CNIL, the French supervisory authority (cnil.fr), or with the authority of your country. To exercise these rights or for any question, write to [email protected].

The legal notice state the identity of the publisher.