Privacy policy

The data controller is Alexandre Lamata, publisher of the service, Cagnes-sur-Mer (France). For any request regarding your data: [email protected].

The content of secrets is never accessible to the publisher: it is end-to-end encrypted in your browser and erased on expiry. This policy therefore only covers metadata.

• Account holders: email address, name, sign-in log (dates, IP addresses) — to provide the account service and ensure its security.
• For each push: metadata (type, dates, view counter) and audit log (IP addresses and browsers of views) — for security traceability and service operation. The IP shown to the sender is anonymized (last octet removed); the full IP is only accessible to the administrator.
• Abuse reports: the reported link, the reason, an optional comment and the reporter's IP address — to handle abuse and deter malicious reports.
• Secret content: end-to-end encrypted, never accessible to the publisher, permanently erased on expiry.

• Account management: performance of the contract (art. 6(1)(b)).
• Logs and IP addresses: legitimate interest (security, abuse prevention, art. 6(1)(f)), and a legal obligation on the host to retain connection data.

• Sign-in logs: 12 months.
• Audit-log IP addresses: 12 months.
• Abuse reports: IP address anonymized after 12 months, report deleted once handled and that period has passed.
• Account data (email, name, passkeys, tokens, sessions): erased as soon as the account is deleted.
• Deleting an account: the account and all content are erased immediately and permanently; only a minimal connection log (IP address + creation timestamp), severed from your identity is kept until the 12-month legal deadline, then purged. This retention is required of us as a host and is exempt from the right to erasure (GDPR, art. 17(3)(b)).
• Encrypted content: erased on push expiry (view count or delay reached).

No data is sold or shared with third parties for commercial purposes. No transfer outside the European Union of service data (infrastructure in France). The technical network intermediary (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA) only handles encrypted traffic and has no access to any cleartext content.

ppush sets no analytics cookies, no advertising trackers and no social media trackers. On your first visit, ppush itself writes nothing to your device; only Cloudflare security cookies may be set right away. Here is the full list:

• ppush_session (cookie): keeps you signed in to your account. Set when you sign in, removed when you sign out or after 14 days at most.
• lang and theme (cookies): the language and theme you picked in the footer. Kept for 12 months.
• ppush-generator(browser local storage): your password generator settings, saved when you change them. Never sent to the server; you can erase it by clearing the site's browsing data.
• Cloudflare security cookies (for example __cf_bm): set by our network provider to tell visitors from bots and protect the service from abuse. They are not used to follow you across sites.

These are either strictly necessary for the service (session, security) or tied to a customization you asked for (language, theme, generator). They are therefore exempt from consent under the EU ePrivacy rules (in France, article 82 of the Data Protection Act and the CNIL guidelines), which is why no banner is shown.

Under the GDPR, you have the rights of access, rectification, erasure, objection, restriction and portability. Exercise them at [email protected].

You also have the right to lodge a complaint with the CNIL (the French supervisory authority).

End-to-end encryption (AES-256-GCM, key never transmitted), passwords hashed with Argon2id, TOTP two-factor authentication, opaque sessions hashed in the database. Details on the About page. Legal notice: /legal.