Privacy

Last updated

In short: this website does not track you, and AquasManager keeps your data at home. Only what you choose to send (a species proposal, an idea or a group order) reaches the publisher.

Data controller: Emmanuel Smith, contact@aquasmanager.fr.

This website

  • No cookies, no audience measurement, no advertising trackers.
  • No third-party resources: fonts, images and scripts are served by the website itself.
  • Your theme choice (light or dark) is kept in your browser and never sent.
  • The website is hosted by OVH (see the legal notice). Like any host, OVH keeps technical logs (date, requested page, browser, IP address) for the security and proper operation of the service, and retains them as required by law. The publisher does not use them. Legal basis: legitimate interest (security of the service).

The AquasManager app

AquasManager is self-hosted: your aquariums, readings, photos, accounts and settings are stored on your server. The publisher has no access to them and receives no usage statistics.

If you store data about other people in it (your family’s accounts, contacts…), you are responsible for it.

The services you connect yourself (Telegram or ntfy notifications, an external AI assistant, e-mail) receive what you send them, under their own terms.

The publisher’s service (hub.aquasmanager.fr)

Your installation can exchange with this service, for three things:

The shared species catalogue. Your server downloads it regularly (every 6 hours by default). It sends no identifier and no data; only the service’s technical logs (date, IP address) keep a trace of it, for 30 days.

Your proposals (new species, correction, idea). They are only sent when you click to send them, directly from your browser. What is sent: the content of the proposal, the nickname you enter (optional), the app version and its language. Nothing else: not your address, your credentials or your aquarium data.

  • The proposal is published as a public issue on GitHub, in the AquasManager repositories, to be read and discussed. The service does not keep it itself.
  • Your IP address is only used to prevent abuse (number of submissions per hour): it is kept in memory for one hour, then forgotten; technical logs keep it for at most 30 days.
  • GitHub (GitHub, Inc., United States) hosts the issues; transfers to the United States are covered by the EU–US Data Privacy Framework.
  • To have a proposal or your nickname removed, write to contact@aquasmanager.fr.

Legal basis: your request (you send the proposal) and legitimate interest (preventing abuse).

Group orders (grouping a mail order with hobbyists in your area). Nothing is sent until you organise or join an order.

  • For a listing: title, shop, department, pickup area (town or district, never an address), deadline, nickname, contact and the details you enter. For a participation: nickname, contact and message.
  • The listing is visible to users following that department, without any contact. The organiser’s contact is only shown to participants, and a participant’s contact only to the organiser.
  • Your server receives a secret token to manage the listing or participation; the service only keeps a fingerprint of it. It also keeps a fingerprint of your installation identifier, to prevent abuse (number of listings per day).
  • Listings and their participations are deleted 30 days after the deadline, or as soon as the organiser deletes the listing; a participant can leave at any time.
  • To follow an area, your server asks the service for the listings of your departments (about once an hour); the list of your departments stays with you.
  • A listing reported several times is hidden pending moderation.

Legal basis: your request (you publish or join the listing) and legitimate interest (preventing abuse).

All three exchanges can be turned off completely with the AQUAS_HUB_URL=none setting (see Configuration).

E-mails

If you write to the publisher, your message and address are used to reply to you. They are kept for the duration of the exchange, then for at most 3 years.

Your rights

You can ask to access, correct or delete your data, or object to its processing, by writing to contact@aquasmanager.fr. If you believe your rights are not respected, you can lodge a complaint with the French data protection authority, CNIL.

No data is sold or used for advertising.