Legal
Privacy
Personal data
We only collect the data needed to create your account and manage access (email, optional name, purchase history). No data is resold. To measure its audience, the site counts page views without cookies and without storing IP addresses: each visit is only linked to an anonymous fingerprint renewed every day, which cannot recognise you from one day to the next; these measurements are kept for thirteen months. If you accept it in the banner provided for this purpose, and only then, the site also uses Google Analytics: Google sets measurement cookies, kept for at most thirteen months, and processes browsing data, including your IP address, on its servers, including outside the European Union. This data is used only to measure traffic, never for advertising. You can withdraw your consent at any time using the “Manage cookies” link at the bottom of every page. To protect some forms against bots (sign-up, forgotten password, contact, professional access request, and sign-in after several failed attempts), the site uses Cloudflare Turnstile: Cloudflare then analyses technical information about your browser and device, including your IP address, to check that the request comes from a person, including outside the European Union. According to Cloudflare, this data is used only for this check and never for advertising. You may delete your account at any time from “My account”: deletion is permanent and erases the data attached to it, except for billing records we must keep to meet our accounting obligations.
Newsletter
If you sign up for the Psychotip newsletter, we record your email address, the language of the site and the dates of your sign-up and of its confirmation, as well as the newsletters sent to you. Your subscription only takes effect once you click the confirmation link we send you by email; without that click, you receive nothing further and your address is deleted after thirty days. Your address is used only to send you the newsletter, at most once a month, on the basis of your consent; it is neither sold nor shared. Emails are sent by our provider Resend, which processes them on our behalf, including outside the European Union. You can unsubscribe at any time, using the link in every newsletter or by writing to us through the contact form: your address is then deleted from the list.
Messages after sign-up
If you have not taken out a subscription, we send you, in the days after you create your account, at most three emails with getting-started tips: two, five and nine days after you sign up, in the language you signed up in. To tailor them, we use the last guide you opened and whether your account is a professional one; to quote prices in your currency, we store with your account the currency used when you signed up and when you log in: the one you chose on the site or, failing that, the one of the country you connect from, without keeping that country. We also store the last of these emails sent and its date, so that each one is sent only once. These emails stop as soon as you subscribe. They are based on our legitimate interest in presenting the service on which you created an account. You can object at any time, in one click, using the link at the bottom of each of these emails, or through the contact form: we then store the date of your request, so that we send you no more of them; if you delete your account, nothing further is sent to you. During a free trial, the email announcing its end reminds you of what you did during the trial (guides opened, sections read, plan followed or, for a professional account, manuals opened, questionnaires sent and guides recommended), using data already stored with your account.
Questionnaires sent by professionals
A professional subscriber can send a questionnaire to a patient through a link, which they pass on themselves or which the site sends by email to the address they give, or enter on the site the answers to a questionnaire completed on paper. For these answers, the professional is the controller, and Psychotip acts on their behalf, as a processor. We ask for neither the name nor any identifying information about the patient: each questionnaire is linked only to a code, which the professional notes in their own file. When the professional has the link sent by email, the recipient's address is used only for that email: it is not recorded in our database, and our email delivery provider keeps only a technical record of it, for a limited period. The answers may reveal health information; they are encrypted as soon as they are recorded, are used only to calculate the result the professional reads, and are neither used for any other purpose, nor shared, nor sold. The result is erased at the end of the retention period chosen by the professional, from one day to one year (seven days by default), counted from when it is first read, or from when the answers are sent if it is not read; this period is shown to the patient before they answer, and it is never extended for answers already received; an unused link stops working after thirty days, and the record of the questionnaire (its code and dates) is deleted thirty days after the result is erased or the link expires. When the professional creates a follow-up questionnaire, intended to be completed several times by the same patient, only the intensity score of each part is also kept, encrypted and without the answers, to chart the course over time: it is erased twelve months after the latest measurement, or as soon as the professional deletes the follow-up. The email reminding them to send the next questionnaire contains only the code of the follow-up. The email that notifies the professional contains no answers. To curb abuse, the IP address of the device sending the answers is kept briefly to count submissions, without being linked to the answers. These data are stored by our hosting and database providers, like the rest of the service's data. A patient who wishes to exercise their rights should contact the professional who sent them the questionnaire.
Recommended guides and referrals
When a professional recommends a guide to a patient, we record the guide, its language, the dates on which the link was created and first opened, the number of times it has been opened and the date on which the access offered ends, as well as, if the professional enters one, an encrypted label, which must not be the patient's name. We ask for neither the patient's name nor their address; when the professional has the link sent by email, the address is used only for that email and is not recorded. The opened link is kept in a necessary cookie, set in the patient's browser for at most ninety days, to give them access to the guide. If the patient logs in or creates an account from that browser, the recommendation is linked to their account. The professional sees whether the link has been opened and until when access runs, never what the patient reads or whether they subscribe: they only see the total number of their patients who have subscribed. For referrals, we record the subscriber's personal code and, for an account created through their link, the identity of the person who referred it; the code of the link followed is kept for thirty days in a necessary browser cookie. The referrer sees only totals (accounts created, subscriptions, free months), never the names of the people invited; the referrer's first name may be shown to the person they invite. The credits granted are recorded with our payment provider, Stripe. These data are kept for as long as the accounts concerned exist.