Privacy policy

This policy explains how Coderise handles personal data when you visit this website, contact us or buy Heatlens for Matomo. It is written to comply with the EU General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).

Who is responsible

The data controller is CODERISE SAS, 1870 Chemin de la Barre Saint-Jean, 13080 Aix-en-Provence, France, RCS Aix-en-Provence 988 559 118 ("Coderise", "we"). Contact for any privacy question: contact@coderise.fr. Full details are in the legal notice.

What we collect and why

Audience measurement on this website

Data

Pages viewed, date and time, referring page, browser and device type, screen size, and approximate location derived from a shortened IP address.

Purpose

Producing anonymous statistics about how the site is used, so we can improve it.

Tool

Matomo, loaded through Matomo Tag Manager from analytics.ncit.cloud, configured without cookies.

Legal basis

Our legitimate interest in measuring the audience of our own site (Article 6(1)(f) GDPR).

Retention

No longer than 25 months.

This measurement meets the conditions set by the French data protection authority (CNIL) for audience measurement that does not require consent: it is used only to produce anonymous statistics for us; data is not combined with other processing or passed on to third parties; IP addresses are anonymised before any use; geolocation is no more precise than city level; and data is kept no longer than 25 months.

You can object to this measurement at any time by unticking the box below. Your choice is stored in your browser only, for this purpose, and our pages then stop sending statistics from that browser.

Hosting logs

Data

IP address, requested page, date and time, browser information.

Purpose

Delivering the site and keeping it secure. These logs are kept by our host, GitHub; we do not use them.

Legal basis

Legitimate interest in providing a secure website (Article 6(1)(f) GDPR).

Retention

Set by GitHub, which processes these logs for security and service operation under its own privacy statement.

Orders, invoicing and delivery

Data

Name, email address, company, billing address, VAT number, purchase details, payment status, license key, and delivery emails. We never see or store your card number: Stripe handles it.

Purpose

Processing your order, delivering the software and license key, issuing invoices, managing renewals and refunds, and meeting our accounting and tax obligations.

Legal basis

Performance of the contract (Article 6(1)(b) GDPR) and our legal obligations (Article 6(1)(c) GDPR).

Retention

For the duration of our business relationship, then archived for up to 5 years as evidence (limitation period, Article L110-4 of the French Commercial Code). Invoices and accounting records are kept for 10 years (Article L123-22 of the French Commercial Code).

Support

Data

Your contact details, the content of your tickets and emails, and the technical information you share (Matomo, PHP and Heatlens versions, logs, screenshots).

Purpose

Providing support under our support policy.

Legal basis

Performance of the contract (Article 6(1)(b) GDPR).

Retention

24 months after the ticket is closed.

Questions and enquiries by email

Data

Your name, email address, company and the content of your message.

Purpose

Answering your questions and, if you ask, preparing a quote.

Legal basis

Legitimate interest in answering enquiries, or steps taken at your request before a contract (Article 6(1)(f) and (b) GDPR).

Retention

Up to 3 years after our last contact, if you do not become a customer.

We send customers emails about their order, license, updates and renewals.

We also send customers and business contacts occasional news about Heatlens, such as new releases, new editions and offers. We do this on the basis of our legitimate interest in promoting our products to professionals (Article 6(1)(f) GDPR). Every such email has an unsubscribe link, and you can object at any time by writing to contact@coderise.fr. We never sell or rent email addresses.

No cookies

This site sets no cookies. It has no advertising, no social media widgets, and our fonts are hosted on the site itself, so your browser does not contact Google Fonts.

When you click a payment link, you leave our site for a page operated by Stripe. Stripe may use cookies on its own pages for payment and fraud prevention, under its own privacy policy.

Who receives your data

Your data is handled by Coderise. We do not sell it. It is shared only with the following providers, as needed:

• GitHub, Inc. (USA), which hosts the site through GitHub Pages.
• Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland, which processes payments and issues invoices. Stripe acts as our processor for payment processing and, for some purposes such as fraud prevention and its own legal obligations, as an independent controller under its own privacy policy.
• NCIT, which operates our Matomo analytics (analytics.ncit.cloud) on servers rented from DigitalOcean in its Frankfurt data centre (FRA1), Germany.
• Microsoft (Microsoft 365, Microsoft Ireland Operations Limited), which hosts our mailbox contact@coderise.fr. Microsoft may transfer data outside the EU under the EU-US Data Privacy Framework and standard contractual clauses.
• Pennylane (France), our accounting and e-invoicing platform, which receives the billing details on our invoices.
• Public authorities, when the law requires it.

Transfers outside the EU

GitHub, Inc. is based in the United States. Transfers to GitHub rely on the EU-US Data Privacy Framework, under which GitHub is certified.

Stripe may transfer data to Stripe group companies outside the EU, including in the United States, relying on the EU-US Data Privacy Framework and on the European Commission's standard contractual clauses, as described in its privacy policy.

Security

We take reasonable technical and organisational measures to protect your data, and we choose providers that offer appropriate safeguards.

Your rights

You have the right to access, correct and delete your data, to restrict or object to its processing, and to data portability, within the limits set by the GDPR. Under French law, you can also give instructions about what happens to your data after your death.

To exercise these rights, email contact@coderise.fr. We answer within one month; this can be extended by two months for complex requests, in which case we tell you. We may ask for proof of identity if we have reasonable doubts about who is making the request.

If you think your rights have not been respected, you can complain to the CNIL, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr.

Heatmap data collected with Heatlens

This policy does not cover data that our customers collect on their own websites with Heatlens. Heatlens runs on the customer's own Matomo server and stores its data only in the customer's own Matomo database. That data never reaches Coderise, and we have no access to it. Each customer is the data controller for it. If you are a visitor of a website that uses Heatlens, contact the operator of that website to exercise your rights. Heatlens makes no connection to Coderise servers: no license check, no update check, no usage reporting.

Changes to this policy

We may update this policy. The date at the top shows the latest version. We will inform customers of significant changes by email.