What we know about you
What we keep, and what we cannot read
This page is not written alongside the site: it is built from the code that runs it. The periods it announces are the ones the purge applies, and the list of what is kept is the list of columns that exist.
- The one sentence to remember
- What you write in your space — messages, notes, documents — is sealed on your own device before it leaves. Our servers hold bytes they cannot open. This is not a promise of good behaviour: it is how the programme is built, and it is also why we can give you nothing back if you lose your password.
The gist in 30 seconds
- Sealed on your device, before it leaves: we can neither read nor return these contents — not at your request, and not at anyone else's.
- What stays inside your browser: these four things send us nothing at all.
- What you will find nowhere with us: none of your data goes to a third party for advertising, prospecting or resale.
- Your rights, and where to press: these are gestures in the interface, not a procedure.
- What we cannot yet tell you: no legal opinion has been obtained yet.
What we cannot read
Sealed on your device, before it leaves
Your password makes a key that never leaves your browser. That key seals what follows, and we hold no copy of it.
-
Your exchanges with a support professional
We know a message went out, from whom to whom, when, and how large it was. We do not know what it says.
-
The notes in your support file
They are sealed for you and for the professionals you have authorised. Withdrawing an authorisation reseals the file for those who remain.
-
The documents deposited
They arrive already sealed. Even the file name is not kept in the clear.
What never leaves
What stays inside your browser
These four things send us nothing at all. You can check this yourself: open your browser's network inspector and walk through them — no request goes out.
-
Take stock
Your answers and the marker that comes out of them stay on your device.
-
My journal
What you write there has never had anywhere to go.
-
The guidance helper
The questions and your answers live in the page. Nothing is recorded, neither with you nor with us.
-
Invitation windows
When a window invites you to join the newsletter, your browser keeps dates — that of your first visit, and the one when you closed a window or signed up — so as not to show it again and again. No identifier, no address, and nothing leaves your device: neither displays nor clicks of a window are counted.
What is kept
Column by column, and nothing more
This list is not copied out by hand: it is read from the database that serves this page. A column added tomorrow appears here the same day, and the site refuses to go live if nobody has written down what it is for.
You have an account: what do we keep?
It exists only for what commits you: a session, ongoing support, a booking. Nothing free asks for one.
First name
- Your first name, as the person supporting you sees it. Optional: it is empty if you chose a pseudonym.
Surname
- Your surname, for the same reason, and for an invoice if one goes out. Optional, like the first name.
Pseudonym
- The pseudonym you appear under, if you chose not to give your name. It does not identify your account — your address does — and it need not be unique: two people may carry the same one.
Email address
- Your email address. It identifies the account, and reminders go out through it.
Password fingerprint
- Your password — never as such. We keep only a fingerprint of it, from which the password cannot be worked back.
Kind of account
- What your account opens: a personal space, a support space, the association's office.
Language
- The language we write to you in.
Country
- The country set in your browser, when it sets one. It decides the currency shown and the help resources offered.
Time zone
- Your time zone, so a session shows at the hour it happens where you are.
Two-step verification key
- The key for two-step verification, if you turned it on. Stored under lock in the database.
Two-step verification proved
- The date two-step verification was proved to work.
Backup code fingerprints
- Fingerprints of your backup codes. The codes themselves show once and are never kept.
Last code accepted
- The last code accepted, so that it cannot be replayed.
Random value for your key
- A public value drawn at random. It helps build your personal key and tells nothing to anyone without your password.
Public key
- Your public key. It is meant to be known: it is what anything sealed for you is sealed with.
Sealed private key
- Your private key, sealed by your password. We cannot open it.
Random value for the recovery phrase
- The same public value, for your recovery phrase.
Backup copy of the private key
- A second copy of your private key, sealed by your recovery phrase. We cannot open that one either.
Last visit
- The date of your last visit. It marks accounts that may be erased.
Suspension date
- The date on which a member of the association suspended your account, if that has happened. No reason is kept alongside this date.
Suspended by
- Which account of the association placed the suspension. Used to find who to contact, never why.
Notice before erasure
- The date we warned you that an unvisited account was about to be erased.
"Stay signed in" token
- The token that keeps you recognised from one visit to the next.
Date created
- The date the account was created.
Last change
- The date it was last changed.
Erasure request
- The date you asked for it to be erased.
Date of the last password change
- The day your password was set or changed. Used to spot an old password, never to guess one.
Moment before which your sessions are closed
- A moment, in milliseconds: any session opened before it is closed again. This is what signs out a lost device or a suspended account.
We have not yet written down what this piece of data is for. Write to us: we will answer you, and we will fix this page.
- We have not yet written down what this piece of data is for. Write to us: we will answer you, and we will fix this page.
We have not yet written down what this piece of data is for. Write to us: we will answer you, and we will fix this page.
- We have not yet written down what this piece of data is for. Write to us: we will answer you, and we will fix this page.
We have not yet written down what this piece of data is for. Write to us: we will answer you, and we will fix this page.
- We have not yet written down what this piece of data is for. Write to us: we will answer you, and we will fix this page.
We have not yet written down what this piece of data is for. Write to us: we will answer you, and we will fix this page.
- We have not yet written down what this piece of data is for. Write to us: we will answer you, and we will fix this page.
You asked to be called back: what do we keep?
Left from "Take stock" or from immediate help, when you would rather we called you.
Phone number
- The number you ask to be called on. It is kept in the clear, because someone has to dial it.
Preferred time
- The time of day that suits you, if you said so.
Country
- The country set in your browser, so we point you to help in your own country.
Language
- The language of the page when you asked.
Date of the call
- The date the call was made.
Date of the request
- The date of your request.
Last change
- The date it was last changed.
You wrote to us from the contact page: what do we keep?
Three fields, and never a fourth: enough to answer you, and nothing that would sort you into a category.
Name
- The name you give. A first name or a nickname is enough.
Email address
- The address we reply to.
Message
- What you write to us.
Language
- The language of the page when you sent it.
Date of the reply
- The date we replied.
Date sent
- The date you sent it.
Last change
- The date it was last changed.
You offered to join us: what do we keep?
To become a member, to give time, to propose a partnership, to become a local relay.
Kind of request
- What you are offering: membership, time, a partnership, becoming a relay.
Name
- The name you give.
Email address
- The address we reply to.
Organisation
- The body you represent, if you represent one.
Area offered
- What you offer to work on, where the form asks.
Country
- The country you are writing from.
Message
- What you write to us.
Language
- The language of the page when you sent it.
Date of the reply
- The date we replied.
Date of the request
- The date of your offer.
Last change
- The date it was last changed.
You declared a donation: what do we keep?
The amount you announce, the line you would like to support, and enough to send you the way to pay. No amount has arrived yet, and no card details are asked for.
Declaration reference
- A string drawn at random, which designates nothing and takes us to your declaration.
Language of the declaration
- The language you wrote in, and therefore the one we answer in.
Name
- The name you give, if you give one.
Email address
- The address the way to pay goes to, and then your receipt.
Wish to stay anonymous
- Your wish that your name appear nowhere. It closes publication only.
Country
- The country you are giving from. It decides the currency and the kind of receipt.
Currency
- The currency, taken from that country.
Amount announced
- The amount you announced. It is not an amount received.
Line chosen
- The line you would like to support. It is a wish, not an earmark.
Message
- Whatever you wanted to tell us, if you wrote anything.
Date it was sent
- The moment you sent it, and therefore the moment you agreed to our answering you.
State of the declaration
- Where your declaration stands: declared, handed to the provider, matched with a donation, or closed.
Matching recorded donation
- The donation actually received that this declaration ended up producing, once it arrived.
Date it was recorded
- The date of your declaration.
Last change
- The date of its last change.
You booked a place at a date: what do we keep?
A first name and an address. A free gathering asks for no account.
Gathering chosen
- The gathering you are booking for.
First name
- Your first name, so we can greet you by it.
Email address
- The address the reminder goes to, and for an online gathering, the room link.
Language
- The language those messages reach you in.
Country
- The country set in your browser, so the time shows in your own zone.
Booking link token
- The token in the link that lets you re-read or cancel your booking without an account.
Reminder sent
- The date the reminder was sent to you.
Attendance noted
- The date your attendance was noted.
Withdrawal
- The date you withdrew.
Date booked
- The date you booked.
Last change
- The date it was last changed.
You receive the newsletter: what do we keep?
One address, confirmed by you — or added by the team with your consent, the date of which is kept — and an unsubscribe link in every message. We write once a month and, if the association has switched them on, a week before a gathering and when a podcast episode is published. We do not know whether you open a message or what you click: it contains no tracking pixel and no redirected link. Per send, we only keep the number of messages sent.
Email address
- The address the newsletter goes to.
Language
- The language we write to you in.
Country
- The country set in your browser.
Invitation window the sign-up came from
- The number of the invitation window you signed up from, when you did so from one. It is used to count how many people each window brought together, nothing else.
Confirmation and unsubscribe link token
- The token in the link that confirms your subscription, and in the one that ends it.
Date confirmed
- The date you confirmed.
Date unsubscribed
- The date you unsubscribed.
Date subscribed
- The date you subscribed.
Last change
- The date it was last changed.
Date consent was recorded by the team
- If your address was added by the team with your consent — given outside the site — the date of that consent.
We have not yet written down what this piece of data is for. Write to us: we will answer you, and we will fix this page.
- We have not yet written down what this piece of data is for. Write to us: we will answer you, and we will fix this page.
We have not yet written down what this piece of data is for. Write to us: we will answer you, and we will fix this page.
- We have not yet written down what this piece of data is for. Write to us: we will answer you, and we will fix this page.
For how long
The periods, exactly as the purge applies them
A task runs every night and erases whatever is past its term. These figures are read from the setting that task uses: they cannot drift from what actually happens.
- Not kept
- The link to an appointment room — Counted from the end of the session.
- 30 days
- The site's technical logs — Counted from when they were written.
- 30 days
- Your request to be called back — Counted from the call, or failing that from the request.
- 30 days
- A notification in your space, once read — Counted from the moment it was read.
- 90 days
- A notification in your space — Counted from the notification.
- 180 days
- Your message from the contact page — Counted from our reply, or failing that from your sending it.
- 365 days
- The security log — Counted from each action noted.
- 365 days
- What we know about a message without having read it — Counted from the closing of the support file.
- 365 days
- Your booking for a past gathering — Counted from the day of the gathering.
- 365 days
- Your offer to join us — Counted from our reply, or failing that from when it was left.
- 366 days
- Your donation declaration — Counted from the declaration.
- 730 days
- An account left unvisited, with no support under way — Counted from your last visit.
- 1,095 days
- A support file that has been closed — Counted from its closing.
- 4,018 days
- An invoice — Counted from when it was issued.
- 4,018 days
- A membership paid — Counted from the day it was settled.
- 4,018 days
- A donation received — Counted from the day it was paid.
Where does each of these periods come from?
The link to an appointment room · Not kept
- Zero days: it goes with the session. A room link that outlives its session is a door left open.
The site's technical logs · 30 days
- What the server notes when something goes wrong. They record the action and who did it, never the contents of a page or a message.
Your request to be called back · 30 days
- Short, and deliberately so: this row says someone went through the alert path, and your number sits there in the clear because someone has to dial it.
A notification in your space, once read · 30 days
- A notification that has been read has done its work. Keeping it longer would leave a trace of what you went to look at, and when.
A notification in your space · 90 days
- It carries no name, no excerpt and no reason: a kind and a time. It is not an archive, it is a reminder — what it announces lives elsewhere, with its own duration.
Your message from the contact page · 180 days
- Enough to find again an exchange that comes up later — a correction reported, a request picked up at the next meeting.
The security log · 365 days
- A sign-in, successful or refused, a changed password, a suspended access: the date, the account, a truncated network and a type of device. Never a password, a code or the contents of a file. The address typed on a refused sign-in is not there.
What we know about a message without having read it · 365 days
- Who wrote to whom, when, and how large. The text itself is sealed and we have never seen it.
Your booking for a past gathering · 365 days
- Enough to know how many people came, and nothing else.
Your offer to join us · 365 days
- Longer than a message, because an offer is decided at the pace of the office, which meets a few times a year.
Your donation declaration · 366 days
- It is not an accounting entry: no amount has entered the account. Beyond one closed financial year it will no longer be matched with anything. The donation it produced carries its own ten years.
An account left unvisited, with no support under way · 730 days
- We warn you first, at the account's address, and the notice period is 30 days. An account carrying support under way is not affected.
A support file that has been closed · 1,095 days
- Long enough for a return to remain possible with the same account. This period does not touch your account: someone who has been supported keeps their space.
An invoice · 4,018 days
- This period is not of our choosing. An invoice is kept ten years for the tax authorities, and we add one financial year of margin because the term runs from the closing of the accounts, not from issue. A request to erase an account does not carry it away.
A membership paid · 4,018 days
- Money that came into the account is a bookkeeping entry, with the same obligation and the same margin as an invoice.
A donation received · 4,018 days
- Same nature, same obligation, same period: it is a bookkeeping entry.
What is never kept
What you will find nowhere with us
These absences are not oversights: they are columns that do not exist, and scripts that are not loaded.
-
No audience measurement
No visitor counter, no advertising tracking. No public page of this site loads a script from anywhere else when it opens, and an automatic check proves it at every release. A video hosted elsewhere only loads if you start it yourself. The banner you may have seen on arrival measures nothing: it describes the two technical cookies this site can set, and leaves a real choice for the one that is not required.
-
No complete network address
Whatever identifies your connection is never stored as such in our database. The security log keeps, for each sign-in, a truncated address — the last digit erased, which designates a network and not your device — and the type of device ("Firefox · Windows"), for twelve months. The counters that limit sign-in attempts keep only a fingerprint of the address.
-
No question about how you are
No form on this site asks what you are going through, or offers a reason to tick. An automatic check refuses any such field.
-
No card details
Not in the database, not in a log, not in a session. None has ever passed through this site.
-
Nothing sold, handed over or swapped
None of your data goes to a third party for advertising, prospecting or resale. Not for money, and not for free.
Taking back control
Your rights, and where to press
These are gestures in the interface, not a procedure. You do not have to write to anyone to exercise them.
-
Take away everything we hold
A complete export, in a format that opens anywhere, from your own space. What is sealed appears as it is: we cannot hand it to you opened.
-
Erase your account
In one action, from your space, without a form and without us. What bookkeeping law obliges us to keep — an invoice, a membership paid, a donation — is not carried away, and this page says so before you pay anything.
-
Correct what is wrong
Your first name, surname, address and settings are changed from your space.
-
Withdraw an agreement
An agreement given inside a support file is withdrawn where it was given. We keep the trace of the withdrawal — that trace is what proves you withdrew it.
Who else has access
The processors
The companies that, in order to keep this site running, see something go past. The list is short, and it must stay that way.
- The host
- Not filled in — They hold the servers this site is installed on, and the backups. They see everything kept in the clear go past — and nothing that is sealed: their copies hold the same unreadable bytes.
- No payment provider
- None is connected today: the site takes no payment, and no banking data passes through it. The day one is connected, it will appear here before it takes a penny.
- Sending messages
- The messages this site sends you leave from the same host. No third-party sending service is connected.
- Videos hosted elsewhere
- The “Weerupsy TV” pages present videos hosted by their authors — YouTube, Vimeo, Dailymotion, Facebook, Instagram, TikTok, X, Twitch, Rumble, PeerTube, Loom, Wistia, Google Drive, SoundCloud, Bilibili, Odysee. None is loaded when the page opens: it only loads when you click “Play the video”, and the sentence right under the button names the host that will be contacted. It then receives your network address and may set its own cookies, under its own policy — which we do not control. An “Open on…” link is always available to watch the video at its host, in another tab. Thumbnails, for their part, are stored on this site.
- And nobody else
- No advertising network, no measurement tool, no social network embedded in our pages when they open. The only exception is the video you start yourself, described above. The links to our accounts are links, not widgets.
What this page does not claim
What we cannot yet tell you
A privacy policy that asserts a false regime is worse than no page at all. Here is what this one refuses to write until somebody has checked it.
-
No legal opinion has been obtained yet.
The way this site is built sharply reduces what we hold, but how sealed data whose keys the host does not have should be qualified is not settled. An opinion is being sought before the support space opens publicly. We do not anticipate it here.
-
We cite no article of law.
Two regimes apply to this programme, the European data protection regulation and the Senegalese personal data act, and the stricter of the two governs. Writing an article number we have not had checked would lend this page an authority it does not have.
-
We say nothing about the association's tax status.
Its regime, its registration number and whether a donation opens a tax reduction are not decided from a website. They will be written when they have been verified, and not before.
-
Nobody has been appointed to watch over data protection.
Until the office appoints someone, write to the association's contact address: that is where the answer comes from.
This cannot wait?
If you are going through a hard moment right there, right now, you do not have to come through us. Here are the immediate help resources for your territory — open with no account, and readable even with no connection.