Information & transparency
Privacy Policy.
This policy covers only the Equilify pre-launch website and its waitlist. It does not describe data processing in the future mobile app, which is not yet available.
Last updated: October 26, 2026
1. Data controller
The data controller for the waitlist is Théodore Cornu, an individual developing the Equilify project in his own name.
To ask questions or exercise your data protection rights, email privacy@equilify.fr. General inquiries: contact@equilify.fr.
2. Data collected
Signing up requires only an email address and your affirmative consent. We do not ask for your name, phone number, health information or cannabis consumption details.
To document consent, a private server-side log records the time of your request, the language and version of the consent text and its hash, whether the checkbox was selected, the form source, a request identifier, the Hostinger Reach response status and an HMAC-SHA256 digest of your email address. This log does not store the email address in plain text; the digest remains pseudonymized personal data.
A temporary IP-derived digest is used to limit abusive submissions within an approximately one-hour window. Our hosting provider may also process technical logs for service operation and security.
3. Purposes and legal bases
- Waitlist management and occasional messages about development, possible testing opportunities and launch: your consent (GDPR Article 6(1)(a)).
- Proof of consent: compliance with accountability and consent-demonstration obligations (GDPR Articles 5(2) and 7(1)).
- Form security and abuse prevention: legitimate interests in protecting the service (GDPR Article 6(1)(f)).
Signing up is optional. Joining the waitlist does not authorize unrelated marketing communications.
4. Recipients and service providers
Waitlist email addresses are stored and managed using Hostinger Reach, which supports project communications. Website files and private technical records are hosted by Hostinger. Access is restricted to what is needed to operate the waitlist and handle data subject requests. We do not sell the mailing list.
Depending on the applicable service providers and subprocessors, processing may involve transfers outside the European Economic Area. Hostinger's Data Processing Agreement describes contractual safeguards, including standard contractual clauses where applicable.
5. Data retention
- Waitlist contacts: up to 12 months after signup or the last voluntary, identifiable indication of interest. We may ask you to renew your interest before that deadline; without a positive response, we remove your contact from the active list.
- Consent records: while the subscription is active, followed by up to an additional 12 months after closure where genuinely necessary to retain proof, unless a lawful reason requires otherwise. These are managed separately from Reach.
- Opt-out records: only strictly necessary data may be retained to ensure that an unsubscribed person is not contacted again; these are not used for messaging.
- Technical records: abuse rate limiting uses an approximately one-hour window. The host's logs and backups are subject to its security and retention practices.
Contact removal and private-log maintenance are handled through maintenance procedures and are not automatically synchronized between Reach and the private log.
6. Consent and unsubscribing
Joining the waitlist is voluntary, with an unchecked checkbox by default. There is no mandatory double opt-in email confirmation. You may withdraw consent at any time, free of charge, by writing to privacy@equilify.fr or using an unsubscribe link included in our emails where available. We will stop sending the relevant messages. Withdrawal does not affect previous lawful processing.
7. Your rights
Subject to GDPR conditions, you have rights of access, rectification, erasure, restriction of processing, and data portability where applicable. To exercise these rights, contact privacy@equilify.fr. We generally respond within one month. You may also file a complaint with the French data protection authority, the CNIL.
8. Security
The website uses HTTPS. Consent records are stored separately from publicly accessible website files, in a restricted-access directory. These precautions reduce risk but cannot guarantee absolute security.
10. Policy changes
This notice concerns only the current presentation website and waitlist. Any future mobile application will have its own data processing information before launch.