Privacy

Moamen Elmasry, in a personal capacity, Paris, France. For any question or request about your data: contact@moamen.fr.

Your account: email address, name, sign-in method (LinkedIn or emailed code), creation and last sign-in dates. It gives you access to the space. Legal basis: performing the service you ask for (GDPR, article 6.1.b).

If you use LinkedIn, LinkedIn shares your name, your email address and the address of your profile picture. Nothing else: not your connections, not your career, and no right to post on your behalf.

Your profile, optional: role and sector. It helps tailor the content and understand who uses the space. Legal basis: your consent (article 6.1.a). You can clear it at any time.

Your Testing Agent downloads: date, version, and whether they came from the space or from your personal link. They make that link work and show whether the tool is used. Legal basis: the legitimate interest (article 6.1.f) of measuring how a free tool is used.

Your course progress: the steps you completed and their dates, so you find it on all your devices and the certificate can be checked. Your written answers stay in your browser. Legal basis: performing the service you ask for.

If you downloaded the Testing Agent: an email when an update is published, with what it changes and how to install it, and the record of its sending (version, date). It is a service message, with no promotion. Legal basis: the legitimate interest (Article 6.1.f) of letting you keep a tool you use up to date. You can refuse it at any time in My account.

Your certificate, if you get it: your name, its date and its number. Anyone with that number can check it is authentic and see those three items, nothing else. Legal basis: performing the service you ask for.

Testing Agent test phase: your access (seat, invitation or accepted request, and its date), and who invited you, if anyone. If you have a seat, your invitations: their date, status and expiry; the link itself is never kept, only a fingerprint that lets it be recognised. Legal basis: performing the service you ask for.

If you ask for access: your company, your role and what you want to test. The request is emailed to me, with your name and address, so that I can read it and reply. Legal basis: steps taken at your request before entering into an agreement (Article 6.1.b).

News by email: only if you asked for it. Legal basis: your consent, which you withdraw in My account.

Aggregate figures, computed daily (number of members, of downloads). They identify no one. The Testing Agent update-check counter keeps only a date and a version number: no IP address, no identifier.

No advertising, no resale, no profiling, no automated decisions. No analytics cookie, no third-party script. Your data goes to no one but the providers below, who process it on behalf of the site.

Nhost (Sweden): database, sign-in and sending sign-in codes, from Frankfurt, Germany.

Brevo (France): sending the Testing Agent update emails and the test phase emails (welcome when your access opens, receipt of your access request and its forwarding to my personal mailbox, my reply) and news, only if you asked for it.

Netlify (United States): site hosting. Pages and your personal link go through its servers; this transfer outside the European Union is covered by the European Commission standard contractual clauses.

LinkedIn (Ireland), only if you choose to sign in with LinkedIn: LinkedIn handles that sign-in under its own privacy policy.

Your account and everything attached to it: as long as you use it. With no sign-in for 2 years, it is deleted automatically, as the CNIL (the French data protection authority) recommends.

An account opened without a profile (for example with a refused address): deleted after 30 days.

The sign-in code: 5 minutes, and it works once.

A refused access request: deleted 6 months after the decision. An expired or cancelled invitation: deleted 6 months later. An accepted request and your access stay as long as your account exists.

The emails of an access request, in my personal mailbox: deleted together with the request.

Aggregate figures: no limit, since they concern no one in particular.

Providers' technical logs: for their own periods, to keep the service secure.

Once you are signed in, your browser keeps a session key so you stay signed in. Since the service needs it, it does not require your consent (French Data Protection Act, article 82). Signing out erases it.

Your written answers in the course stay in your browser; only the steps you completed and their dates follow your account.

You can access your data, correct it, erase it, get it in a readable format, object to its processing, ask for it to be restricted, and withdraw your consent at any time.

In My account: download your data, change your preferences, delete your account in one click. Deletion erases everything, immediately.

For anything else: contact@moamen.fr, with an answer within a month. If you feel your rights are not respected, you can complain to the CNIL (cnil.fr).

Encrypted connections, no password to remember or steal, and a check made by the database itself: each member can read only their own data.