Privacy Policy

1. Data Controller

CrushCode is the data controller for personal data collected through the website crushcode.fr.

2. Data We Collect

We only collect what you give us, and what the website needs in order to work:

• Website request (“Create my site” page): first name, last name, email address, phone number, the address of your website or social profiles, the project name, your description, the template and options you chose, and the address of a website you like if you give one. It is stored in our database.
• Quote request and contact form: name, email address, subject, project description and the features you ticked. It reaches us by email and is not stored in our database.
• Client area: your email address and password (stored encrypted), your order, your subscription and your invoices. Payment is handled by Stripe: we never see your card number.
• Your current website: when you give us its address, we read its public content to prepare the new one.
• Demo sites and our clients’ shops: messages left on a demo site, and orders placed on a client’s shop (name, address, phone number, email), which we process on behalf of that client.
• Technical data: your IP address, to check that you are not a robot and to limit abusive submissions; the host’s technical logs; cookieless audience measurement (pages viewed, referring site, device type).

3. Why, and on What Legal Basis

Each processing operation rests on a legal basis set out in Article 6 of the GDPR:

• Preparing your website and replying to you (website request, quote, contact): steps taken at your request before entering into a contract (Article 6(1)(b)).
• Managing your subscription, your client area and payment: performance of the contract (Article 6(1)(b)).
• Keeping invoices and accounting records: legal obligation (Article 6(1)(c)).
• Protecting the website against robots and abuse, and measuring its traffic without cookies: legitimate interest (Article 6(1)(f)).
• Handling messages from demo sites and orders from our clients’ shops: on behalf of those clients, following their instructions.

We do not sell your data and do not use it for advertising.

4. Who Receives It

Your data is intended for CrushCode. Our service providers process it on our behalf, each for its own function:

• Vercel Inc. (website hosting and audience measurement), 440 N Barranca Ave #4133, Covina, CA 91723, USA;
• Supabase (database, client accounts, files);
• Stripe (payment and invoicing);
• Google (Gmail, which sends our emails and receives your requests);
• Cloudflare (Turnstile, the anti-robot check) and Upstash (limiting abusive submissions);
• Anthropic (Claude, the assistant that helps us build your website from your request).

Some of them are based in the United States: these transfers are covered by the safeguards provided by the GDPR, such as the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.

5. Retention Period

• Requests that went no further: at most three years after our last exchange.
• Clients: for as long as the subscription runs; invoices and accounting records for ten years, as required by law.
• Client account: until it is deleted, which you can do yourself from your client area.
• Anti-abuse counter: a few minutes, then deleted automatically.

6. Your Rights (GDPR)

Under the General Data Protection Regulation (Articles 15–21), you have the following rights:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure (right to be forgotten)
• Right to data portability
• Right to object to processing
• Right to restriction of processing

To exercise these rights, write to us at ccrushcode@gmail.com. We will respond within one month.

7. Cookies

The website sets no advertising cookies, and its audience measurement uses none. The only cookies are technical: your client-area session and a protection of the contact form against forged submissions. They are needed for the website to work and require no consent, which is why the website shows no cookie banner.

8. Contact and Complaints

For any question about this policy or to exercise your rights, write to us at ccrushcode@gmail.com. You also have the right to lodge a complaint with the relevant supervisory authority (in France: www.cnil.fr).