Your data belongs to you
Legal document: the French version is authoritative.
1. Data controller
Abyddos is the controller for the processing of your personal data. Its full contact details appear in the Legal notice.
For any question about your data, use our contact form.
2. What data do we collect?
Account data (provided by you)
- Name — to personalise your experience
- Email address — login identifier and service communications
- Password — stored as a hash, never in plain text
- Date of birth (optional) — for services requiring age verification
Usage and technical data
- Session authentication token
- Security logs and timestamps (processed by Medjay on the Shield Network layer)
- IP address, device type, browser — collected via Google Analytics 4 to measure audience
Product-specific data
Depending on the Abyddos services you use (Ma Brigade, SoftSCORE, Atlas, Shop, etc.), additional data may be collected. Each product details its own processing in its dedicated documentation.
3. Why do we process this data?
- Provide the subscribed service — legal basis: contract performance
- Secure the infrastructure — legal basis: legitimate interest
- Measure anonymised audience — legal basis: legitimate interest (Google Analytics with IP anonymisation)
- Service communications (incidents, terms updates, invoices) — legal basis: contract performance
- Newsletters and product news — legal basis: explicit consent, revocable at any time
4. With whom do we share your data?
We never sell your data. No advertising use, no third-party marketing targeting.
The only strictly necessary sharing is:
- Host — located in the European Union (see Legal Notice)
- Stripe — for payment processing, in accordance with PCI-DSS
- Google Analytics — for anonymised audience measurement
5. How long do we keep your data?
Your data is kept for the duration of your account's activity.
When your account is deleted, your personal data is erased within thirty (30) days, unless a legal retention obligation applies (accounting, anti-fraud, etc.). Medjay security logs are purged on a rolling 12-month rotation.
6. Cookies and trackers
Abyddos uses a limited number of cookies and trackers:
- Essential technical cookies (session, preferences) — no consent required as they are necessary for the service to function
- Google Analytics 4 — anonymised audience measurement, with IP truncated before storage
No advertising cookies. No third-party marketing trackers. No retargeting.
7. Security
- AES-256 encryption at rest for sensitive data
- HTTPS / TLS for all client-server communications
- Hashed passwords, never stored in plain text (modern algorithm, per-user salt)
- European hosting, subject to GDPR
- Continuous monitoring by our Shield Network layer, operated by Medjay.
8. Your rights (GDPR)
You have, at any time and free of charge, the following rights:
- Right of access to your data
- Right to rectification
- Right to erasure ("right to be forgotten")
- Right to portability of your data
- Right to object to processing
- Right to restriction of processing
- Right to withdraw your consent at any time (without retroactive effect)
To exercise any of these rights, contact us through our contact form.
You may also file a complaint with the French CNIL data protection authority (cnil.fr).
9. Tracking and advertising
Abyddos does no behavioural advertising tracking. No third-party tracker for marketing purposes is deployed on the site. Audience measurement is anonymised and does not feed any user profile.
10. Changes to this policy
This policy may be updated. Important changes will be flagged at the top of this page and, where legally required, communicated by email to affected users.
11. A question about your data?
Use our contact form. We reply within 30 days at most, in accordance with the GDPR.
