Privacy policy

Last updated: October 20, 2026

This English translation is provided for convenience only. The French version is the legally binding one and prevails in case of any difference.

1. Data controller

The data controller is the publisher of Revizo: Arthur Gillès de Pélichy, based at 134 chemin du Bois Notre-Dame, 83700 Saint-Raphaël, France. Contact for your personal data: [email protected].

2. Data processed

• Your email address, to send you your download link and messages related to your purchase.
• Payment data processed by Stripe, and the transaction and billing information needed to follow up on your purchase. Revizo never sees your card details. Stripe sends you the invoice.
• Downloads of Revizo made with your link (date and number), to limit sharing of the link.
• If you join the leaderboard between friends (optional): your nickname, your friend code, your friends, your points per day, your duels and the dates your site connected to the leaderboard. For the ranked duel: your Elo rating, your games (score, right or wrong answer and response time, never the questions), your online presence while your site is open, and an encrypted fingerprint of your site's subjects, used only to know whether two players are using the same site.
• If you create a class account (no purchase) on a creator's site: your nickname, a fingerprint of your password (the password itself is never sent: it is transformed in your browser, then again on the server), the site the account is tied to, your points, your duels, your Elo rating and your sign-in dates.
• If you are the creator of a class site: the site's identifier and name, a fingerprint of the entry key derived from the site password, and the site's encryption key, itself encrypted with that password (useless without it). Revizo knows neither the site password nor the content of your courses.
• To limit sign-in and account-creation attempts: a fingerprint of your IP address and your nickname, as temporary counters, erased automatically once the hour has passed.
• Done-for-you plan: the course materials you send us, used only to build your site and deleted after delivery.

Revizo does not receive your courses, your study material or the details of your progress: only your points for the day are sent if you join the leaderboard, along with the result of each answer during a ranked duel. Your courses are read inside your own Claude account; your site is published and hosted by you, on Netlify; your progress stays in the browser of each of your devices. These services fall under your relationship with Anthropic and Netlify and their privacy policies.

3. Purposes and legal bases

• Performance of the contract: managing your purchase, sending you your download link, letting you download Revizo again and running the leaderboard between friends and duels if you use them.
• Legal obligations: keeping the accounts and retaining the required supporting documents.
• Legitimate interest: preventing fraud and sharing of the download link, and keeping proof of delivery in case of dispute. This interest is balanced against your rights.

Your email and the information needed for payment are essential to the purchase. Without them, Revizo cannot perform the contract.

4. Recipients

The publisher accesses the data to the extent needed to manage sales. The following service providers are involved:

• Cloudflare: hosting of the sales site.
• Supabase: sales database.
• Stripe: payment and invoicing.
• Google (Gmail) and Resend: sending emails.

These providers only receive the data needed for their role. Stripe also processes some data for its own obligations, under its privacy policy. The competent authorities may receive data where required by law.

The creator of a class site sees, for each account of their class, the nickname, the date of the last visit and the points this week. Members of the same site see the other members' nicknames, points, streaks, duels and Elo ratings.

5. Transfers outside the European Union

Using these providers may involve transfers outside the European Union, in particular to the United States. These transfers are governed by the European Commission's standard contractual clauses and/or the Data Privacy Framework, where the recipient is certified and the transfer falls within the scope of that certification. Additional measures are taken where necessary.

Recipient countries and safeguards for each provider: Supabase: European Union (Ireland); Cloudflare: global network, company based in the United States; Stripe: Ireland and United States; Google (Gmail) and Resend: United States. Transfers to the United States rely on the Data Privacy Framework where the provider is certified, and on the European Commission's standard contractual clauses otherwise. You can request a copy of the safeguards from the contact given in section 1.

6. Retention periods

• Email, purchase and downloads: as long as the license is active, then 3 years after the last download, or until you request erasure.
• Class accounts: until they are deleted by the site's creator or at your request, and at the latest 3 years after the last sign-in.
• Nickname, friends, points, duels, Elo rating and ranked duel games: as long as you use the leaderboard, deleted after 3 years without signing in or on request.
• Accounting records: 10 years from the end of the financial year concerned.

Accounting records are kept for the legal period, even after your other data has been erased.

7. Your rights

Under the conditions set by the regulations, you have the following rights:

• Access your data and obtain a copy.
• Have inaccurate or incomplete data corrected.
• Request erasure of your data or restriction of its processing.
• Receive the data covered by portability in a reusable format, and request its transfer where technically possible.
• Object, on grounds relating to your situation, to processing based on legitimate interest.
• Set instructions for what happens to your data after your death.

To exercise your rights, write to the contact given in section 1. Describe your request and give the email address used for your purchase or, for a class account, your nickname and the name of the site. Proof of identity may be requested if there is reasonable doubt about your identity, limited to what is necessary.

You will receive a reply within one month. This period may be extended by 2 months for complex or numerous requests; you will be informed within the first month. Some rights may be limited by a legal obligation, in particular the retention of accounting records.

You can lodge a complaint with the French data protection authority (Commission nationale de l'informatique et des libertés): cnil.fr.

8. Cookies and audience measurement

The Revizo sales site does not place any cookies on visitors' devices.

Audience measurement is done by Revizo itself, with no third-party service and no cookies: each time a public page is displayed (home, demo, download, legal pages), a daily counter is increased by 1 for that page and for the site you came from (its domain name only, without the full address or parameters), and also when you click "Buy". No IP address, no identifier and no information about your device is recorded: these counters cannot identify you. Bots are ignored, and nothing is counted if your browser sends the "Do Not Track" or "Global Privacy Control" signal. Purpose: knowing how many people visit the site and how well the sales page works (legitimate interest). The counters are kept for 25 months.