Privacy

Privacy Policy

Pulsers respects your privacy and is committed to using your personal data only to the extent strictly necessary for the service to work. This policy explains what data we collect, why, and what your rights are under the General Data Protection Regulation (GDPR).

Data controller

The data controller is Fred Hasselot, publisher of Pulsers (SIREN 423 696 814). For any question about your data, you can write to fred.hasselot@gmail.com.

No trackers, no advertising

Pulsers uses no third-party analytics tool, no advertising cookies and no trackers. We count our visits ourselves, without cookies and without keeping anything that identifies you, for 25 months at most. We also count the pages seen, the searches and the country of the visit (IP Geolocation by DB-IP), without keeping your address. If your browser asks not to be tracked, you are not counted. We do not sell or share your data for commercial or marketing purposes. The site sets a session cookie, strictly necessary for your login, and two preference cookies, with no tracking, set only when you choose a theme without an account or a view of the module list. The video on the About page and a patch's examples to listen to are embedded from YouTube, in its no-cookie mode, or SoundCloud: those pages contact them (see the cookie policy).

Data collected

We collect the data you provide to us, and a few visit measurements taken automatically (see “No trackers, no advertising” above):

  • User account — if you create an account: email address and name. This data is used to authenticate you, save your patches and identify you within the community.
  • Sign in with Google or GitHub — if you choose it: the identifier the service gives your account and the email address it sends us, to recognise you. No password, no contacts, no repositories, no other data. You can unlink that account at any time from My account.
  • Patches — the content you create and, if you choose, share publicly.
  • Patch generations (beta) — if you use the generator: your request, the patch it made, your opinion and the changes you make to that patch afterwards. They stay private from other members. The Pulsers team may read them to improve the generator; those an administrator keeps serve as examples to the generator for later requests.
  • Rack and synth photos — if you send one to be read: the photo, what was read on it, and its cost. It is kept until you delete it from My account, or delete your account.
  • Newsletter — none is sent: we only keep your subscription recorded before it stopped, with its date.
  • Credit purchases — if you buy some: the pack, its amount, your credits and their history, and the references Stripe gives us to find a payment again. The payment itself is processed by Stripe (see below); we never store your bank details.
  • Donations and monthly supports — if you make one: amount, status and, where applicable, the name, email and message you provide. The payment itself is processed by Stripe (see below); we never store your bank details.

Legal bases

Account data is processed on the basis of performing the service you request from us (account creation, patch saving). Donation data is processed on the basis of fulfilling your support request and complying with our accounting and legal obligations.

Processors and recipients

Your data is only accessible to the publisher and to the strictly necessary technical providers:

  • DigitalOcean — hosting of the application and database (Amsterdam, Netherlands — European Union).
  • Scaleway — storage of the photos sent and of the site's images (Paris, France — European Union).
  • Stripe — payment processing for credit purchases, donations and monthly supports.
  • Brevo — sending the site's emails (sign-in codes, notices): your email address and the message are passed to it.
  • Google, GitHub — signing in with a Google or GitHub account, if you choose it.
  • Google (Gemini API) — reading rack and synth photos, generating patches and translating texts: the photo, the request or the text, and the description of the instrument are sent to it.

Retention period

Your account data is kept as long as your account exists. The photos sent are kept until you delete them from My account, or with your account. Visit statistics are kept 25 months at most. Data related to donations, monthly supports and credit purchases is kept for the period required by our accounting and tax obligations. You can delete your account yourself at any time, from My account: your private content, comments and reactions are erased; your public content stays, without your name; your payments stay, unlinked from you, for the accounts.

Your rights

In accordance with the GDPR, you have the right to access, rectify, erase, restrict and port your data, as well as the right to object. To exercise these rights, write to fred.hasselot@gmail.com. You may also lodge a complaint with the French CNIL (cnil.fr).