Privacy policy

Controller and scope

Escufon, LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, United States, is the controller for processing associated with operating thais-descufon.com. This policy covers browsing, accounts, memberships, comments and website emails.

Data we use

We process email addresses, profile information you provide (including an optional photo), securely hashed passwords, sign-in sessions, posts and interactions, support requests and consent records. We also retain language and feed preferences so you can choose French, English or both and receive relevant notifications.

For memberships, the website retains payment references and statuses, the amount, access period and information needed to manage cancellation. Stripe processes payment details; we do not store full card numbers or security codes.

For Monero, the site retains invoice and payment references, the amount and status needed to open access. NOWPayments receives the transaction information necessary for payment; the site does not send your email when creating an invoice and never receives your wallet’s private key.

Technical data helps secure the service and limit abuse. Avoid posting private or sensitive information in comments.

Purposes and legal bases

Contract performance enables us to manage membership, accounts, content access and messages needed to operate the service. Legal obligations provide the basis for processing required for billing and rights management. Security, abuse prevention and defence of rights rely on legitimate interests, subject to your rights.

Newsletter signup is separate from membership and relies on your consent, confirmed by email. You may unsubscribe at any time. New-post notifications can be disabled from My account or using the link in the emails.

Recipients and service providers

Authorised staff of the operator access only information necessary for their duties. Vercel hosts the website and private files; Turso hosts the database; Stripe handles card payments, NOWPayments handles Monero payments when available, and Resend delivers emails. These providers may also process information to fulfil their own legal and security obligations, under their privacy policies. Information may be shared with advisers, accounting providers or authorities when necessary and legally required.

Your email and payment details are not displayed to other members. Your profile name, photo and comments are visible in the area where you publish them. Data is not sold to advertisers.

International transfers

The operator is based in the United States and some providers may process data outside the European Economic Area. Applicable safeguards depend on the provider and processing: an adequacy decision where applicable, standard contractual clauses or another appropriate legal mechanism. You may request information about the safeguards actually applicable from the controller.

Retention

Account data is kept to operate the account while it exists. Cancelling membership stops renewal but does not automatically delete the account. You may request deletion of data that is no longer necessary.

Payment references, consent records and correspondence may be retained with restricted access where needed for legal obligations or establishing, exercising or defending a legal claim. Such records are not retained for marketing solely because of that obligation. Regulatory retention periods applicable to the operator must be finalised with its advisers before payments open.

Sign-in and recovery links expire and are single-use. Sessions are time-limited and can be revoked. Rights requests are retained only to process and document them.

Cookies, YouTube and browsing

An essential session cookie keeps you signed in. The website does not use advertising trackers or its own audience measurement tool. Language and feed cookies retain your selected interface and content preferences. Some interface settings may also be stored in your browser.

YouTube thumbnails load from its image service. The YouTube player loads when you request playback and may then process data under that third party’s policies. External websites have their own policies.

Your rights

Depending on applicable rules, you can request access, correction, deletion, restriction and portability, object to certain processing and withdraw consent without affecting earlier lawful processing. Proportionate identity checks may be necessary; do not send identification documents without a justified request.

Send requests to the controller using the contact details in the legal notice. You may also complain to a supervisory authority, including the CNIL in France (cnil.fr). Withdrawing consent for newsletters or notifications does not automatically cancel paid membership.