Last updated: 2026-08-14
1. Privacy (GDPR)
Data controller: Johan C., a natural person, publisher of the service (see the legal notice).
GDPR contact: to exercise your rights or ask a question about your personal data, use the Contact page.
DPO: no Data Protection Officer has been appointed at this stage, as Crandoro considers that it is not legally required to do so. If this appointment becomes mandatory, the DPO contact details will be published here.
Purposes: account creation and management, service delivery (posting, subscriptions, RSS/API), security (fraud, abuse, spam and unlawful-use prevention), support and contact requests, account deletion, moderation, cooperation with competent authorities, and legal obligations.
Legal bases:
- Contract (Terms): to provide the service.
- Legitimate interests: security, abuse prevention, service improvement.
- Legal obligation: retention/archiving when required by law.
- Consent: only for non-essential cookies and trackers (analytics, advertising) when enabled.
Data that may be processed:
- Account: email address, password (stored only as a salted cryptographic hash, never in plain text), technical identifiers, settings, preferences.
- Public account name: a public handle chosen by you (e.g.
@cat_lover) and, optionally, a free-form display name (may be a pseudonym). Crandoro does not request and does not collect your real legal name; no signup or account field requires a civil identity. The display name can be updated at any time. - Content: posts, comments, media, timestamps, managed accounts, bio / status / summary, declared country and website (all optional on the account).
- Geolocation: only if you enable it. The position is rounded on your own device, before anything is sent: we therefore never receive your exact position, and it exists nowhere on our servers. This applies both to the local feed and to a geotagged post.
- Security: technical logs, IP address, pseudonymized technical identifiers.
- Contact and GDPR requests: email address, verification code used as a discussion identifier, contact reason, message content, date/time, IP address and technical information needed to prevent abuse.
- Keys & signatures: a public key may be linked to your account; the matching private key stays on your device or in your browser and is used to sign some actions.
- Technical fingerprint: a technical identifier derived from your browser or your device, used only for abuse detection (e.g., abnormal management of many identities) and security. It is pseudonymized, not used for advertising or profiling, and not shared with third parties.
Recipients:
- The publisher of the service and, where applicable, the people he authorises (support, security, moderation, GDPR request handling).
- Strictly necessary technical providers (e.g., hosting, email delivery, maintenance).
- Google reCAPTCHA, on the website sign-up form only, to tell a human from an automated script. Google receives your IP address and technical browsing signals for that purpose, and may transfer them outside the European Union. Legal basis: legitimate interest (preventing mass account creation). None of the content you publish is sent to it.
- Competent administrative or judicial authorities where required by law, official request, report, investigation or dispute.
- If enabled and with your consent: analytics/ads partners.
International transfers:
Crandoro favors hosting in France. Some third-party services (analytics/ads) may involve transfers outside the EEA depending on configuration; they are activated only with consent when required.
Retention:
- Active account: as long as the account is active and needed to provide the service.
- Standard deletion: data becomes non-public; a secure archive may be kept for 1 year, then deleted or anonymized.
- Report, authority request, investigation, fraud, abuse or dispute: strictly necessary data may be retained for up to 5 years after the case is closed, or longer where required by law or by a competent authority.
- Security and anti-abuse logs: 12 months, unless a legal obligation, authority request or dispute requires longer retention.
- Pseudonymized technical fingerprint: 12 months after the last security-relevant activity, unless abuse or dispute requires longer retention.
- Contact and GDPR requests, including the code used as a discussion identifier: 5 years after the last exchange, to document the handling of the request and responses provided.
- Cookie consent: 12 months. Audience measurement data: 25 months maximum where such measurement is enabled.
Crandoro cooperates with competent authorities and does not delete information that must be retained to comply with the law, handle a report, prevent abuse or defend its rights.
Your rights:
You have rights of access, rectification, erasure, objection, restriction, and portability where applicable. To exercise your rights, use the Contact page and choose a reason related to personal data or account deletion. You may also lodge a complaint with your supervisory authority (CNIL in France).
2. Cookies and trackers
Strictly necessary (no consent required):
- Session, security, language and theme cookies.
- Storage of your public feed filters (language, category, tag, country, person, keyword): a browsing convenience only, with no data sent to any third party.
- Security trackers (e.g., pseudonymized technical fingerprint) for anti-abuse only.
Optional (consent required):
- Analytics: only if you enable “Audience measurement” in your preferences.
- Ads: only if you enable “Ads” in your preferences, when ad placements are enabled.
You can update your preferences anytime via the Cookies link in the main menu.
3. Crandoro applications (Android, iOS, Windows)
The Crandoro applications access the same services as the website and process your data under the same terms. The points below apply in addition to the above.
Device access requested:
- Approximate location: only if you enable it, to show posts published near you and, if you choose to, to place a post. The position is rounded on your device before it is sent: we never receive your exact position. It is never shared publicly and is never read while the app is in the background.
- Photos: only when you attach an image to a post or update your profile pictures. The app does not access your photos outside of those actions.
Data kept on the device:
The app keeps locally an anonymous usage-measurement identifier, technical security material used to sign certain requests and to prevent abuse, and an encrypted cache of the content you have already viewed so it can be read offline. None of these is an advertising identifier, and the cache is not shared with anyone.
Processors (applications only):
- Google Ireland Ltd — Firebase Crashlytics: technical crash reports used to fix unexpected terminations of the app. No identifying data and no post content is sent to it. Legal basis: legitimate interest (service quality and security). Disabled in development builds.
- Mixpanel: product usage measurement, limited to a restricted list of events and to non-personal contextual information (platform, versions, locale), used to guide the evolution of the service. No advertising identifier, no user content, no email address. Legal basis: legitimate interest. Data hosted in the European Union.
Account deletion from the app:
The app lets you delete an account from the "Account management" screen. It follows the same retention policy as a deletion performed from the website (see "Retention" above).
Your choices:
You can revoke location and photo access at any time from your device settings, without preventing the rest of the app from working. Uninstalling removes the app and its local data; depending on the operating system, some technical security material may however remain or be regenerated identically on reinstall. To have your data erased, use account deletion or the Contact page.