Privacy notice
Development version, 12 October 2026
Who is responsible
The controller is Johann Kay, 5 Rue Auger Gaillard, 11000 Carcassonne, France. Data-protection contact: contact@aktivismo.org. This notice distinguishes visits to the public website from app use. Processing depends on the features actually provided and those you use. Reading the notice is not blanket consent: acknowledging it is separate from optional, explicit choices for individual purposes.
When you visit the website
Serving pages and defending against attacks requires technical connection data such as IP address, time and requested path. The basis is our legitimate interest in a secure, available service; processing is limited to what is necessary. Actual website hosting provider, data location and access-log retention: IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany (WordPress Hosting Start). Actual data region and access-log retention: IONOS documents visitor and access logs retained for up to eight weeks for regular web hosting, with anonymised IP addresses in visitor statistics. These product-specific statements do not cover plugins, additional application logs or email. The individual hosting region is not confirmed, so we do not claim a specific location. The new legal-text pages load fonts and styling locally and need no optional analytics or advertising scripts. Necessary sign-in or security functions and any optional services actually used are described separately: The new legal pages use no optional analytics or advertising scripts and do not require you to sign in. For account functions, the app stores necessary sign-in and security settings on your device; you can sign out and delete local website data in your browser. Statements about other existing website pages do not automatically apply to these legal pages.
Account, profile and account security
For an account, we process the required email address, technical account and sign-in identifiers, and the legal versions and times you confirmed. This provides and protects the chosen service under the contract or necessary pre-contract steps. Security processing rests on a legitimate interest in protecting access and other people against misuse, unless a statutory duty applies. Optional profile details can be skipped. Public profile details become visible according to your choices and may be moderated before release. Political or sensitive profile information needs a separately assessed basis and, where required, explicit consent. Private details do not become public simply by creating an account. You choose the intended visibility of optional profile fields. The interface allows a later birth-date correction only to dates representing an age of at least 16; other profile changes trigger no age check. Your date of birth is required only when registering an account to check the minimum age of 16. It is stored in your existing private user data and not published automatically. Account functions do not check age again; public content, guest participation and public forms, including the contact form and form bot, do not ask for it. The legal bases, consents and safeguards needed for each processing activity apply independently. No additional age-confirmation fields, timestamps or policy versions, and no parental or identity-verification procedure, are added.
The web app and PWA use Firebase App Check with Google reCAPTCHA Enterprise to limit automated and abusive access. Google processes technical device, browser and connection data and, according to its product documentation, uses the necessary _GRECAPTCHA security cookie for risk analysis. This helps protect your account and keep the service reliable. The legal basis is our legitimate interest in security under Article 6(1)(f) GDPR; this technical check is not an identity or age check or optional usage analytics. Google processes customer data for this service on our behalf under its Cloud data processing terms; we do not claim exclusively European processing or an individual deletion period. The publicly readable legal pages themselves do not load this service.
Engagement and sensitive data
Campaigns, participation and progress can reveal political opinions. We therefore distinguish campaign engagement, campaign creation and publication, and topic personalisation. General registration does not automatically authorise this processing. Where sensitive data requires it, we request specific explicit consent separately, alongside the applicable basis for providing the service. Guest participation requires its own choice in the participation form. You may withdraw consent; this does not change the lawfulness of earlier processing. Withdrawal stops new processing for that purpose but does not automatically delete your whole account or every previously lawful item. You can request deletion of existing data through the deletion and rights channels. Settings display the three separate purposes and your current consent or withdrawal status. New processing for a purpose is refused without the required valid decision. A guest contribution requires its own decision in that form; it is not blanket permission for other campaigns or AI processing.
Public content and addressed people
Published campaigns and approved public profiles are visible online and can be shared outside Aktivismo. Private drafts and account data remain separate. Limit public personal information to what your issue needs. For data about addressed people, we assess purpose, necessity, an applicable legal basis and required information to the person concerned. A public source, official role or campaign creator’s consent does not replace that assessment. Sensitive information needs an actually applicable exception. People receive accessible information about sources and rights; individual information or a specifically documented statutory exception is addressed when required. Political disagreement does not create a blanket veto, but a reasoned data-protection objection is assessed on its merits.
AI, moderation and contact
For AI features actually used, the provider receives only content necessary for generation, translation, moderation or a reply. Providers, data regions, contractual storage and training rules, and any international transfer: The existing AI provider is Mistral AI. Mistral documents the EU as its default region; international transfers may occur depending on the feature. An explicitly used US endpoint would mean processing in the United States. We use the existing api.mistral.ai endpoint without claiming a special contractual regional guarantee. Mistral's general privacy policy is not a retention period for business processing on behalf of customers; its standard DPA generally describes processing for the contract duration. No blanket 30-day deletion promise may be made for the Agents API. Individual Zero Data Retention approval or a model-training setting is not confirmed. Before special categories are transmitted, an applicable provider arrangement and legal basis must exist; minimisation or a general account decision does not replace them. Public profile text may be moderated; profile images may be checked for prohibited content using Google Cloud Vision without unnecessary account data. Mistral supports the knowledge-bound form bot. Contact messages are not automatically anonymous: we process your message, necessary contact details and replies to handle your issue. Technical questions, feedback and suggestions are kept in separate private mailbox folders. Necessary human reply or knowledge review may take place by email. Reported content may be rechecked with the report as context; the reporting person’s identity and original message are not disclosed to the content owner. Private attachments are accessible only for authorised handling. You can send general enquiries, privacy requests, reports and complaints to contact@aktivismo.org. A future form or bot does not create a different legal basis. New AI sharing of sensitive contact content remains unavailable until its specific purpose and lawful provider arrangement are established. Public contact requires neither an account nor an age question.
Usage analysis and advertising
The planned first-party analysis supports reach, usable design and technical quality. It must not create political advertising profiles or track you across unrelated sites. Limited data includes technical events, time, page or function, language, broad device classes, cleaned referral and error or performance categories; not free-text content. Public anonymous use has no persistent visitor identifier, analytics cookies or fingerprints. A necessary multi-step flow may use a short-lived random identifier in memory only; it is temporarily pseudonymous and is not later linked to registration. Signed-in use stays separate. Country is derived only from an existing trusted coarse signal and otherwise remains unknown. Full IP addresses are not analytics features. Actual activation, assessed legal basis and any required choices or objection routes: Our limited own reach and quality measurement is based on the legitimate interest in improving usability and technical reliability. It remains separate from the functions you request and specific consent for sensitive purposes. Children's protection interests are considered. You can submit a reasoned objection to contact@aktivismo.org. This does not authorise optional third-party analytics or advertising services; any consent later required must be obtained separately before use. Operational A/B launches are not part of current development operation. Aktivismo does not sell user data. Paid political advertising may use only immediate factual context, not personal profiles, political interests, topic points or stored participation histories.
Recipients and data transfers
Access is limited to people authorised for the purpose and providers actually engaged, such as website hosting, Firebase/Google Cloud for app operations and necessary AI, mail or payment services. For each service used, we confirm its role, contracting entity, purpose, data region and required transfer safeguards: The website host is IONOS SE. For app authentication, the database, files and server functions we use Google Firebase/Google Cloud; under Google's standard documentation, Firebase Authentication processes data in the United States. The app database, app file storage and current server functions actually checked are in Frankfurt. Google's Cloud Data Processing Addendum governs processing on our behalf and international transfers, including the applicable standard contractual clauses. Mistral AI processes necessary AI inputs and outputs under the conditions explained in the AI section. IONOS also provides technical email delivery. Authorised people may handle necessary enquiries in existing protected work and mailbox storage. This does not claim an individual exception, special data region or additional contractual guarantee. You can request information and a copy of the applicable safeguards through our privacy contact. A data region alone does not rule out access from other countries. For processing outside the European Economic Area, we identify the applicable adequacy decision or suitable safeguards and how you can obtain information about them. Statutory disclosures, such as confirmed child abuse or lawful authority requests, are limited to what is necessary.
How long data is kept
We retain data for its purpose, not indefinitely. Ordinary account, profile and participation data is generally removed within 30 days of account deletion. Campaigns you are responsible for are removed from public view immediately; minimal records remain for at most 90 days before physical deletion unless a specific necessary legal case applies. Withdrawing consent stops new purpose-specific processing and is separate from requesting deletion. One-time codes last 15 minutes; obsolete challenges, export files and unassigned uploads at most 24 hours. Materialised drafts generally last seven days and other inactive drafts at most 30 days. Ordinary completed contact cases are deleted after 30 days. Security and bot diagnostics last at most twelve months, actually documented moderation cases three years and necessary legal cases five years; necessary unresolved cases are reviewed with recorded reasons. Required financial minimum records last ten years from the financial year end, not your whole account. Operational advertising contacts last at most three years from the last interaction, while a minimal objection record only prevents unwanted repeat contact. The Google Cloud logging configuration actually checked retains ordinary logs for 30 days and mandatory system logs for 400 days. The twelve months stated above concern our limited own security and bot diagnostics, not an additional Firestore audit archive. The website section explains IONOS hosting; email copies are cleared according to the purpose of the enquiry without promising an unconfirmed provider-side deletion period.
Analysis remains time-limited
Raw analytics events are deleted after confirmed evaluation or controlled exclusion. An unprocessed backlog may delay analysis but cannot override necessary account or data-protection deletion. Individual session sequences are not archived. Aggregates that remain personal are anonymised or deleted within 30 days. Daily aggregates that are genuinely no longer personal are manually deleted after five years and reviewed regularly for purpose and anonymity. These periods do not authorise collection without a valid legal basis.
Your rights and contact channel
Subject to legal conditions, you can request access and a copy, correction, deletion, restriction and data portability. You may withdraw consent at any time for future processing. You may object to processing based on legitimate interests for reasons relating to your situation, and to direct marketing at any time without giving a special reason. Contact contact@aktivismo.org. We generally respond within one month; if an extension is lawful, we explain its reason and duration within that month. Identity evidence is requested only for reasonable doubts and proportionately. Handling is generally free. You can complain to the French CNIL or another competent authority, including where you usually live or work. When enabled, optional self-service export provides your own Aktivismo data as a private file for 24 hours; it excludes other people’s data and internal security information and does not replace wider access rights.
Automated decisions and safeguards
AI checks and recommendation features may assess content or affect visibility. For a specific restriction, we explain the actual reason and complaint route. A purely automated reply must not replace legally required human review or safeguards. We do not claim every technical assessment is anonymous or has no effects. Assessed classification of automated decisions and actual complaint operation: You can challenge a refused publication or account restriction at contact@aktivismo.org. We examine the specific circumstances and arrange the human decision required by law. An initial AI assessment is not an unchallengeable final decision. Before any new solely automated decision with legal or similarly significant effects, its specific lawfulness and safeguards must be established. We inform you before processing for new purposes or material changes. Access controls reduce risk; we do not promise absolute security.