Website privacy policy

Data controller

SPACE UNITY, a French SASU à capital variable, 34 route Nationale, 08140 Douzy, France, registered as 994 377 208 (RCS Sedan). Telephone: +33 6 60 71 01 49.

Data protection contact: dpo@tblflow.com.

What this policy covers

This policy covers the tblflow.com marketing site: the pages you read, audience measurement, and the emails you send us.

It does not cover the TblFlow application (app.tblflow.com) — account, subscription, billing, and the data you host there. Those are described in the documents published on app.tblflow.com: terms of service, privacy policy and data processing agreement.

Data we collect

This site has no form and no user account. The FAQ and blog search fields filter a list already present in the page: nothing is sent or recorded.

A display preference (light or dark theme) is stored locally in your browser. It stays on your device and is never transmitted.

If you consent to audience measurement, Google Analytics 4 collects pseudonymized browsing data: pages viewed, time on page, device type, approximate location (country or region — never the full IP address, anonymization being enabled).

If you write to us, we process your email address and the content of your message solely to answer your request.

Audience measurement (Google Analytics)

Purpose: to understand which pages are read and how visitors reach the site, in order to steer its content. No advertising use, no profiling.

Legal basis: your consent (GDPR Article 6.1.a). Until you accept, no Google tag is loaded and no cookie is set. You can change that choice at any time via the "Manage cookies" link in the footer.

Processor: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Transfers outside the European Union: data may be transmitted to Google LLC in the United States. That transfer relies on the adequacy decision adopted by the European Commission on 10 July 2023 under the EU–US Data Privacy Framework, to which Google LLC is certified.

Durations: user and event data is retained for 14 months in Google Analytics, without resetting on new activity. The trackers set on your device (_ga, _ga_*) last 13 months.

Google Signals and data sharing with Google advertising services are disabled: the purpose stays audience measurement.

Other recipients

Cloudflare, Inc., the site's host, which also provides native audience measurement with no cookie, no individual identifier and no browser fingerprinting.

No data is sold or rented to third parties.

Retention periods

Google Analytics data: 14 months from collection, then automatically deleted by Google.

_ga and _ga_* trackers: 13 months on your device.

Consent choice: stored locally for up to 6 months, per CNIL guidance, after which you are asked again.

Emails you send us: kept for as long as needed to handle and follow up your request.

Data security

The site is served exclusively over HTTPS, with HSTS, and hosted on Cloudflare's infrastructure, which handles encryption in transit and protection against common network attacks.

The site stores no account or payment data: it has neither a database nor a form.

Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict, object to, and port your data. You can withdraw your consent at any time without affecting the lawfulness of earlier processing.

To exercise these rights, write to dpo@tblflow.com. You may also lodge a complaint with the CNIL (www.cnil.fr) or your local data protection authority.