Privacy policy
Data we collect
- Email address (sign-in link).
- Your books' content (themes, titles, generated illustrations).
- Credit purchase history (amount, date). Card data is handled by Stripe, never by Doodimo.
- IP address and a normalised form of your email address, to limit abuse of free previews and sign-in emails.
- Free preview log: your account identifier, the identifier and date of each free preview, and a fingerprint of your normalised email address (computed with a secret key: the address itself is not stored in it).
- If you ask for it: your wish to be notified by email when subscriptions open.
Purposes and legal basis
Providing the service and performing the contract (GDPR art. 6.1.b); bookkeeping (legal obligation); protecting the service against abuse (legitimate interest, art. 6.1.f), including the free preview log, used only to enforce the number of free previews per account and per address, even when a preview or an account is deleted and created again to obtain new ones; subscription-opening email: your consent (art. 6.1.a), which you can withdraw at any time from the subscription window or by writing to us.
Processors
Hosting [host], payments by Stripe, sign-in emails by Resend, illustration and text generation by Cloudflare (Workers AI: only the theme and page subjects are sent, never your email), bot check on the sign-in page by Cloudflare Turnstile (IP address and technical browser signals, for security purposes only). Some may process data outside the EU with appropriate safeguards.
Retention
Account and books: as long as the account exists; deleted on request. Technical backups: 14 days. Accounting records: 10 years. Contract evidence (boxes ticked before payment, confirmation emails, withdrawal and cancellation statements): 5 years after the contract ends, even if the account is deleted. IP addresses: anti-abuse counters deleted within 2 days, server technical logs kept for at most 30 days. Free preview log: 12 months after each preview is created, then deleted automatically, even if the preview or the account was deleted in the meantime. This is the period over which the number of free previews per address is counted: a shorter period would let someone recover previews by deleting and recreating an account; nothing is kept longer.
Cookies
Only strictly necessary cookies: sign-in session and site language. No advertising or analytics cookies.
Your rights
Access, rectification, erasure, portability, objection: write to ctc.doodimo@outlook.fr. You may also contact the French data protection authority (CNIL).