Privacy policy

Who is responsible for your data?

The data controller is the operator of preparefrance.com (see the legal notice), reachable through the contact form. The service is directed at people located in France: the GDPR applies to your data.

What data do we collect?

• Account: your email address, preferred language and the procedure you chose (CSP, CR or NAT). There are no passwords: we never store any.
• Progress: your answers to practice questions and your mock exam results (score, date, answers given).
• Payment: purchases are processed by Stripe, acting as merchant of record and controller of payment data. We never see or store your card number: we only keep a Stripe customer identifier and your purchase status.
• Analytics: Vercel Analytics, cookieless and without cross-site tracking. We also log internal product events (e.g. "mock exam completed") linked to your account.
• Contact: if you write to us through the contact form, your email address and your message, kept for as long as it takes to deal with your request.
• Cookies: a session cookie strictly necessary for signing in, and two preference cookies that remember the site language and the procedure you chose (CSP, CR or NAT). No advertising or analytics cookies.

Why, and for how long?

Your data is used only to provide the service: signing you in, measuring your progress, unlocking your purchase, sending sign-in emails, follow-up emails and your purchase receipt. It is kept for as long as your account exists.

Who has access to it, and where?

Your data is processed by our technical processors: Neon (database), Vercel (hosting and analytics), Stripe (payments), Resend (email delivery). Some of these providers are established in the United States; transfers rely on the mechanisms provided by the GDPR (standard contractual clauses or the EU-US Data Privacy Framework, depending on the provider). No data is ever sold or shared for advertising.

Your rights

Under the GDPR you have the rights of access, rectification, erasure, portability and objection. You can delete your account and all your data at any time from the My account page. Deletion is immediate and permanent (account, practice history, results). For any other request, use the contact form. You may also lodge a complaint with the CNIL (cnil.fr).