Privacy policy

Last updated: 8 October 2026

This page describes the personal data Spore processes on its own behalf, as controller: your account, your billing and your visit to the site. Your recipients' data (addresses, message content, delivery logs) falls under a different framework: we process it for you, as processor, under the data processing agreement. The French version of this policy is the reference text.

Controller

The publisher identified in the legal notice. For any question about your data: contact@sporee.fr.

Data, purposes and legal bases

Account: email address and password (stored hashed), declared domains, API keys. Purpose: providing the service. Legal basis: performance of the contract.
Account emails: address verification, sign-in codes, password reset, service and billing notices. Legal basis: performance of the contract.
Billing: name or company name, billing address, subscription, invoices and payment history. No card data passes through our servers. Legal bases: performance of the contract and the legal obligation to keep accounting records.
Technical logs: IP address, requests and errors, used for security, abuse limiting and diagnostics. Legal basis: legitimate interest in protecting the service.
Traffic measurement: page views and where the visit came from (referring site, campaign). A visitor is counted through a fingerprint of their IP address and browser, computed with a key that changes every day and is deleted the next: it cannot recognise you from one day to the next, and neither the IP address nor the fingerprint is kept. Only daily totals are retained. No cookie is set. Legal basis: legitimate interest in knowing the site's traffic.

We sell no data, do no advertising profiling and take no automated decision with legal effects on you.

Retention

Account data: as long as the account exists. Deleting it, from the application settings, erases the account data and the sign-in identity.
Invoices and accounting records: ten years, as required by article L. 123-22 of the French Commercial Code; other billing data is anonymised after the account is deleted.
Technical logs: fifteen days.
Traffic measurement: the visitor fingerprint does not outlive the day; aggregated totals, which identify no one, are kept.

Suppression and unsubscribe lists are kept after the account is deleted: they are the record of people who asked not to be emailed, and erasing them would resume sending to them.

Recipients

Your data is accessible only to the publisher and to the providers listed on the sub-processors page: OVH SAS for hosting, and Mollie B.V. for payment processing, which receives billing data only. The services we operate ourselves — Urbangate (accounts and sessions), Lungor (billing), Skalpai (technical logs) and Nakoda (traffic measurement) — are described on the same page.

Transfers outside the European Union

None. Our providers are established in France and the Netherlands, and your data is hosted in France.

Cookies

The site only sets cookies the service needs (session, language, display), listed in the cookie policy.

Your rights

You have the right to access, rectify, erase, restrict and port your data, to object to its processing, and to set instructions for what happens to it after your death. To exercise them, write to contact@sporee.fr; we answer within one month. You can also delete your account yourself from the application settings.

If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr).