Privacy Policy

Last updated: September 22, 2026

1. What we collect

When you create an account on Bonne Pluie, we collect:

• Account information — your email address, name, and password (encrypted). If you sign in via Google, we receive your name and email from the provider.
• Learning preferences — your interface language, followed topics, and reading level.
• Learning activity — the articles in your library and their state (favorited, archived), and your gouttes balance.
• Usage data — basic server logs (IP address, browser type, pages visited) to keep the service running reliably.

2. How we use your data

• Match articles to your reading level and the topics you follow.
• Send article emails and transactional emails (account confirmation, password reset).
• Operate the gouttes system (your balance and history).
• Monitor errors and improve the service, using aggregate or anonymised data.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. AI-generated content

Some content on Bonne Pluie is generated or adapted with the help of AI services. We never send your personal information — such as your name, email, or account details — to these services. What may be included in a prompt is what you choose to customize — such as your reading level and followed topics — so the generated article matches your needs.

4. Third-party services

Bonne Pluie relies on the following external services:

• OAuth providers — for authentication only. We store the user ID they provide; we do not access your contacts, posts, or other platform data.
• Email delivery — a transactional email provider sends article and account emails.
• Error monitoring — collects technical details when something breaks.
• Cover images — your browser fetches article images directly from Unsplash's servers, so they see the request like any website visit.

5. Cookies

We use a session cookie to keep you signed in. We do not use advertising or third-party tracking cookies.

6. Data retention

Your account data is kept for as long as your account is active. If you delete your account, we remove your personal data within 30 days. Server logs are retained for up to 90 days.

7. Your rights

You may at any time:

• Access or update your personal information from your profile page.
• Delete your account and associated data.

To exercise these rights, email us at [email protected].

8. Security

We follow industry-standard web security practices — including password hashing and HTTPS encryption — to protect your data, but no system is 100% secure.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email or a notice on the site. Continued use of the service after changes constitutes acceptance.

10. Contact

Questions about this policy? Reach us at [email protected].