Privacy Policy
Citoyen is a personal, non-commercial project. This page is a placeholder while a full policy is drafted.
What we store: the email you sign up with, your account preferences (followed countries, saved cards, language), and the hashed credentials needed to sign you in. We do not sell data. Auth providers we rely on (Resend for email delivery, Google for OAuth) only see what's strictly needed to deliver an email or authenticate a session.
Notifications
If you turn on notifications on a device, we store the subscription address your browser provides (a URL of Google's, Mozilla's, Apple's or Microsoft's push service, plus encryption keys) and the chosen language, linked to your account. It is used only to tell you about new data on the countries and themes you follow and your saved cards; the content is end-to-end encrypted and the push service can't read what it carries. The subscription is deleted when you turn notifications off, sign out on that device, when the browser revokes it, or with your account.
Feedback and suggestions
When you send feedback or an indicator suggestion, we store your message, the fields you filled in (indicator, country, source), the page you sent it from, the language and, if you leave one, the email address to reply to — or your account if you are signed in. These messages are only used to improve Citoyen; they are forwarded to the maintainer by email (Resend) and deleted with your account.
Audience measurement & cookies
We use Google Analytics 4 (Google Ireland Ltd / Google LLC) to understand how the site is used: pages viewed, interactions with cards (save, share, compare, frequency), searches, device type and approximate country. In the European Union, the EEA, the United Kingdom, Switzerland, Turkey, Canada, South Korea and China — or when your location cannot be determined — it is enabled only if you accept it in the cookie banner. Elsewhere it is enabled by default and you can refuse it at any time. Google signals and advertising features are disabled, and data is kept for 14 months. Data may be transferred to the United States under the EU–US Data Privacy Framework. Your choice is stored in your browser for 13 months; you can change or withdraw it at any time with the button below. We also use Vercel Web Analytics, which sets no cookie and collects no personal data.
Questions: contact the maintainer via the About page.