Policy anent privacy

It applies tae processin cairrit oot:

• whan brousin the Site (technical data),
• whan makkin an uisin an account,
• whan subscribin tae the newsletter,
• whan publishin content (e.g. comments),
• whan pittin security an moderation measures in place.

The entity that decides the purposes an means o the processin described ablow — the “controller” in the sense o Article 4(7) GDPR — is:

Data ye gie us directly

Dependin on the features ye uise, PromethEUs micht process:

• Account: email address, username/profile name, account settins; hashed password (never in plain text).
• Profile (optional): photo, banner, biography, links, kintra, date o birth (gin gien).
• Newsletter: email address, subscription/unsubscription status, technical traces tae dae wi registration.
• Published content: comments an the metadata that gaes wi them (date/time, account identifier).

Data collectit automatically

Whan ye access the Site, an for security reasons, PromethEUs micht process:

• Technical data: IP address, user-agent, timestamps, session information, technical identifiers.
• Security data: anti-abuse events (anti-bruteforce, anti-spam, detection o unco access), blocklists.

PromethEUs juist processes yer data whan there's a legal basis (Article 6 GDPR).

Data ye hae tae gie

• The data needit tae mak an manage an account hae tae be gien for us tae provide the service.
• Profile data merkit “optional” dinnae hae tae be gien.
• Consent tae the newsletter is free: sayin no disnae stop ye uisin the Site apairt frae the newsletter.

Data can be accessed:

• by authorised members o the PromethEUs team (access is limitit by role an need),
• by providers that are strictly needit tae rin the Site, actin as processors or independent controllers dependin on the case.

Technical providers (examples)

• Hostin / email: IONOS (France).
• Site security / protection: Cloudflare (dependin on configuration).
• Audience measurement (wi consent): Google Ireland Ltd, actin as processor. The consent banner is PromethEUs's ain: nae third-pairty provider.
• Mappin / third-pairty content: external services (tiles, APIs, video players) that micht get technical data (IP, user-agent).

Some third-pairty services (e.g. online fonts, CDNs, embeddit videos) micht gie entities ootside the EU access tae technical data (includin yer IP address).

Google Analytics (juist if ye consent): data micht be accessed by Google LLC in the United States, which is certifiet unner the EU-US Data Privacy Framework (European Commission adequacy decision o 10 July 2023).

Whaur data is transferred ootside the EU, PromethEUs pits in place the appropriate safeguards laid doun by the GDPR (e.g. standard contractual clauses) an tries tae limit sic transfers whaur it can (e.g. by self-hostin resources).

PromethEUs juist keeps data for as lang as is needit for the purposes it's pursuin.

• Account: for as lang as the account is active; deletit/anonymised whan the account is shut.
• Inactivity: an account wi nae login for 3 year is deletit automatically, alang wi its data. A warnin email is sent 30 days afore deletion; juist loggin in again afore that date keeps the account.
• Deletion: if ye ask, frae yer account settins (password required), yer account an its data are deletit richt awa an fully (comments, likes, bookmerks, contributions, newsletter subscription); a confirmation is sent tae yer address. Replies by ither members tae yer comments are kept.
• Newsletter: till consent is withdrawn (unsubscribe); minimal technical evidence o the withdrawal micht be kept gin needit.
• Security/anti-abuse: technical logs (e-mail errors, security-policy reports) are kept 28 days at the maist. The audit log o administration actions (wha did whit in the console, wi the IP address) is kept 12 month, as the accountability o fowk wi heicher access requires.
• Audience measurement: event-level data kept 2 month in Google Analytics, then juist aggregatit statistics remain; consent choice kept 6 month.
• Backups: limitit retention (target: <= 30 days), wi progressive owerwritin.

The Site mainly uises strictly necessary cookies (e.g. a session cookie) for operation an security.

Cookies we maun hae

These cookies dinnae need consent first (operation/security). Example:

• Session cookie (e.g. __Host-pe_sid): keeps the session gaun/authentication, “session” or short duration.
• Stay-signed-in cookies (__Host-pe_dev, __Host-pe_remember): only if you tick “Stay signed in”. The first holds a random token (only its fingerprint is kept on our servers) that reopens your session on this device for 90 days from your last visit; you can end it from Security (“Connected devices”) or by signing out. The second only remembers, for 400 days, whether the box was ticked, so that it is pre-ticked next time.

Cookies we dinnae need

Wi yer consent only, PromethEUs measures its audience wi Google Analytics 4 tae ken whit pages are read an hoo visitors move frae ae page tae anither. Naething is loadit frae Google afore ye accept: nae script, nae cookie, nae request.

• Cookies _ga an _ga_<ID> (Google Analytics): random visitor identifier, 13 month at the maist, never extendit, set juist on the site ye visit (prometheus-euro.eu or swipe.prometheus-euro.eu).
• Data sent: page address athoot its search terms or tokens, page title, whaur the visit cam frae (referrin site athoot its path, an utm campaign if ony), approximate kintra/region, device type. Nae account identifier, nae advertisin signal, nae cross-device trackin (Google Signals disabled).
• Choice cookie pe_consent (PromethEUs): mynds yer choice for 6 month, valid on prometheus-euro.eu an swipe.prometheus-euro.eu, alang wi a random identifier. That identifier, yer choice an its date are kept for 25 month on wir servers as proof o consent, athoot yer IP address or ony ither data.
• Never measured: the member area, the donation page, the administration console, login an password-reset pages.

Refusin is as easy as acceptin an disnae affect yer uise o the Site. Ye can chynge yer mind onytime; withdrawin deletes the Google Analytics cookies.

Cookie settins

The Europe Live map shaws hoo mony fowk are watchin it at the same time, an — juist if ye chuise tae share it — roughly whit area they're watchin frae. These are twa separate things.

The counter

Nae consent is required an nae personal data is processed: a random, opaque token is generatit for the browser tab, kept for 90 seconds, an never linked tae an account. It's regeneratit for ilka new session an deletit whan the tab shuts.

Sharin yer area

• Legal basis: yer consent (GDPR art. 6.1.a), askit aince an refusit by default.
• Source: yer browser's geolocation, which asks for its ain permission. IP-based geolocation is never uised — it cannae be consentit tae.
• Precision: yer position is roondit tae a cell o aboot 110 km in yer browser, afore ocht is sent. The server never receives a precise position.
• Aggregation: juist cells haudin at least three watchers are shawn. A cell wi fewer isnae displayed at aw.
• Retention: 90 seconds. Expirt rows are deletit on ilka write.
• Nae IP address is stored or read by this feature. Web server access logs record IP addresses for ilka HTTP request, as on onie website; that's separate frae this processin.
• Withdrawal: ae click in the map settins panel, exactly whaur ye grantit it. Yer stored cell is erasit richt awa.
• Refusin chynges naething else on the map. Juist the ability tae see ither fowk's areas depends on sharin yer ain.

The Swipe 2027 questionnaire (swipe.prometheus-euro.eu) keeps yer answers in yer browser only: nae answer is sent tae us while ye play. Gin ye hae a PromethEUs account, ye can chuise tae save yer answers tae it, tae fin them again on anither device.

• Anonymous progress counter (nae consent needit, nae cookie): whan ye reach the stairt, a quarter, hauf, three quarters or the end o a path, the site adds 1 tae a counter o the day, wi juist the path length. Nae answer, identifier or device data is sent, sae the coonts cannae be linked tae ye.
• Audience measurement (juist wi yer consent, through the cookie banner): as on the rest o the Site, Google Analytics measures visits tae Swipe, the time spent playin an the stages reached (stairt, quarter, hauf, three quarters, end). Yer answers an results are never sent. Ye can chynge yer choice onytime frae Swipe settins (“Manage my cookies”).
• Data: yer answers (agree, neutral, disagree, super likes), the selectit path length an yer priority themes. Acause they reflect yer political opinions, they're special-category data (GDPR art. 9).
• Legal basis: yer explicit consent (GDPR art. 9.2.a), askit separately frae account creation by an unticked box, datit an versioned. Athoot it, naething is saved.
• Security: answers are encryptit in the database (AES-256-GCM) an boond tae yer account; juist the nummer o answers is stored in clear. They're never shared, sauld or uised tae profile ye or tae target ye wi content.
• Account: makkin an account frae Swipe maks a PromethEUs account, which gies access tae the haill Site, no juist tae Swipe. The newsletter is optional an separate.
• Wi savin on: the order in which ye answered (the comparator's “race” chart), a daily snapshot o yer five closest candidates (yer trajectory, 60 at the maist), the cairds whase answer ye chynged efter giein it (for the analysis o yer second thochts) an the last version o the cairds ye've seen (sae that juist new anes are offert tae ye). These items are encryptit alang wi yer answers.
• “New proposals” alert (optional, unticked box): an email whan new cairds are published. Legal basis: yer consent, which ye can withdraw onytime frae the Swipe profile, the notification settins page or the link in ilka message. The origin o yer account (Swipe, Waves, site, newsletter) is recordit for account management.
• In-depth analysis (optional purchase): computit by the Site frae yer saved answers whan ye open it, an no stored. Payment taks place on HelloAsso's page; the Site only keeps the amount, date, payment status an its reference, linked tae yer account, for ten year (accountin records).
• Result link (optional): whan ye share yer result, the Site stores the answers in the link unner an 8-character code, wi nae account, nae IP address an nae name, sae that the link bides short. Ony first name stays in the link address. A link no openit for 18 month is deletit.
• Barometer (optional in the gemme): if ye turn on “Take part in the Barometer”, ilka ane o yer nixt answers is sent on its ain, wi nae identifier, tae add 1 tae a daily counter for that proposal (agree, neutral or disagree). Answers ye've aready gien are never sent. On proposal pages an the embeddable caird o the day, the answer gien is coontit the same wey. Nae IP address is kept (juist a hash, deletit efter an oor, against abuse). Percentages for a proposal are juist published frae 15 answers; ablow that, juist the nummer o answers for ilka choice is shawn. Per candidate, juist the nummer o their approvit proposals is published (blind ranking), never the detail o their proposals. Naething is published on the day afore or the day o a vote.
• Retention: till ye delete the save (Profile tab o Swipe) or yer account. They're includit in the export o yer data an erasit wi yer account.

The WAVES mini-gemme (/waves) warks athoot an account: yer progress then bides in yer browser. Wi a PromethEUs account, ye can save it tae fin it again on anither device an, if ye chuise, appear on the leaderboard.

• In yer browser (local storage, never sent athoot an account): heich score, best wave, discoverit creatures, current rin, settins (sound, music, vibration, effects) an whether ye've seen the tutorial. “Clear heich score an bestiary” (gemme Settins) removes the heich score, best wave an bestiary frae this device; clearin the site's data removes aw o it.
• On yer account (if ye're signed in): the same items, plus yer best score an best wave o the week. This is non-sensitive gemme data; the score is reportit by yer browser an isnae verifiet. Purpose: lettin ye resume yer progress elsewhaur. Legal basis: performance o the service ye request.
• Leaderboard: aff by default. If ye tick “Appear on the leaderboard”, yer first name, the initial o yer last name, yer heich score an best wave (an thae o the week) become visible tae ilka visitor o the gemme. Unticking the box removes ye frae the leaderboard richt awa. A rin played wi a cheat command isnae coontit.
• Account made frae the gemme: first name, last name an email address, as for onie PromethEUs sign-up. The “Waves has been updatit” alert an the newsletter are optional (unticked boxes) an can be switched aff onytime.
• Retention: till ye delete the save (gemme Settins, “Delete”) or yer account. Deletin the save affects neither yer account nor the progress stored on the device. The save is includit in the export o yer data an erasit wi yer account.
• Nae gemme-specific audience measurement: the /waves page loads neither Google Analytics nor onie ither tracker.

The Community area of “My space” (sign-in required, nothing is public) lets members find each other, publish short posts and exchange private messages.

• Findability: every signed-in member can find any account by its display name (your pseudonym if you set one, otherwise your first and last name) or its @username. A new account is private: others then see only your display name, photo and @username, and can ask to follow you; only the followers you accept read your bio, interests and posts. Switching to a public account makes them readable by every signed-in member. Never your email address, phone number, birth date or postal address; your country only if you tick it. To stay discreet, use a pseudonym and a @username that does not contain your name. Legal basis: performance of the community service you use; your account privacy setting is your control.
• Posts, replies, likes and follows: short texts (500 characters, no links), readable according to your account: every signed-in member if it is public, your accepted followers if it is private. A member you block sees nothing of yours and you nothing of theirs.
• Private messages are end-to-end encrypted: the keys are created in your browser and the server only stores encrypted blocks and key fingerprints. PromethEUs cannot read your messages. Your 4-digit messaging code protects your key together with a secret kept by the server (encrypted at rest), which is only released after a valid proof of the code; after 5 wrong tries code access is locked for an hour and you are warned by email. Your recovery key remains the way back in: if you lose both the code and the recovery key, your messages cannot be recovered. We do see the metadata: who writes to whom, when, and the size of each message.
• Reports: when you report a post, a profile or a message, the moderators see your report. For a message, only the text you choose to attach is passed on, in clear; the Site cannot verify it.
• Email notification (optional): a message telling you that you have a new message, never naming the sender or quoting the text, at most once every 6 hours. You can turn it off in “Public profile”.
• Retention: until you delete an item or your account. Erasing your account deletes your public profile, posts and the replies to them, likes, follows, messaging keys and your conversations on both sides. All of it is included in the export of your data (messages in encrypted form).

A donation can be made by SEPA bank transfer, frae yer bank tae the association's, or — whan this option is offert on the donation page — by bank card or SEPA direct debit through HelloAsso, a payment platform for associations. In baith cases the Site never receives yer card nummer or IBAN. Ye can gie by transfer athoot tellin us onything; gin ye want a receipt efter a transfer, ye can declare yer donation through a form.

The declaration form collects yer first name, last name, postal address, kintra, email address an the announced amount. This information is encryptit in the database an readable juist by the association's treasurer, frae an account protectit by twa-factor authentication. Whan the transfer is creditit, the association's bank an aw maks available the payer's name, the IBAN o the debitit account, the amount, the date an the reference.

For a card or direct-debit payment, ye're redirectit tae HelloAsso's payment page, whaur ye enter yer payment details an identity; HelloAsso is responsible for that processin unner its ain privacy policy an sends ye yer receipt. Aince the payment is confirmed, the Site receives frae HelloAsso yer first name, last name, email address, postal address (gin enterit), the amount an the payment date. These are encryptit in the database, readable juist by the association's treasurer, an kept for ten year (accountin obligation). Gin ye enter yer name or email on wir page afore peyin, they're passed tae HelloAsso juist tae pre-fill its page.

Donations dinnae gie rise tae a tax receipt. Ye can ask for access tae yer data, for it tae be correctit, or for a declaration no followed by a transfer tae be erasit, by writin tae the association. Data that accountin law requires us tae keep cannae be erasit afore the end o the retention period; yer ither richts remain.

PromethEUs pits appropriate technical an organisational measures in place, includin:

• access control (roles),
• anti-abuse protection (anti-bruteforce/anti-spam),
• loggin o sensitive actions,
• backups an restoration procedures.

In line wi the GDPR, ye hae the follaein richts: access, rectification, erasure, restriction, objection, portability (unner the conditions laid doun by law).

Whaur processin is based on yer consent (e.g. the newsletter), ye can withdraw that consent onytime, athoot affectin the lawfulness o processin cairrit oot afore ye withdrew it (Article 7(3) GDPR). Withdrawin is as easy as gieing consent (unsubscribe link in ilka message or a request sent tae the address ablow).

Ye can an aw gie general or specific directives on whit happens tae yer personal data efter ye dee, in line wi Article 85 o French Law No. 78-17 o 6 January 1978 (“Informatique et Libertés”).

Uisin yer richts: support@prometheus-euro.eu (subject: “GDPR — Exercise of rights”).

Ye can doonload a copy o yer data yersel, onytime, frae yer account settins (password required); the copy is a JSON file an disnae contain yer password or security codes.

PromethEUs micht ask for mair information tae verify wha ye are afore processin a request.

A reply is gien within the GDPR time limits (usually 1 month, which can be extendit in some cases).

Ye can lodge a complaint wi the competent supervisory authority, in particular the CNIL for France.

PromethEUs disnae cairry oot ony automatit decision-makkin, includin profilin, that has legal effects concernin ye or similarly significantly affects ye in the sense o Article 22 GDPR.

The automatit anti-abuse measures described in the “Security” section (anti-bruteforce, anti-spam) micht temporarily restrict access tae the Site; ye can challenge sic measures onytime through the contact address gien in the “Yer richts” section.

PromethEUs micht update this policy tae reflect chynges tae the Site, its services, or the law that applies. The date o the update is shawn in the header.

Information on wha publishes the Site, the publication director an the hostin provider is set oot in the Legal Notice.