Aller au contenu principal
ÉpargneMalinEN

Privacy policy

This privacy policy describes how EpargneMalin.fr collects, uses and protects the personal data of its users, in compliance with the General Data Protection Regulation (GDPR), the French Data Protection Act (“Informatique et Libertés”), and other applicable privacy laws.

Last updated: June 2026

1. Data controller

The data controller is the person who determines the purposes and means of the processing of personal data, within the meaning of the GDPR. Given the nature of the website and the absence of large-scale processing of personal data, the appointment of a Data Protection Officer (DPO) is not legally required under Article 37 of the GDPR. For data protection enquiries, please contact the controller using the details above.

2. Data collected

2.1 Simulator data

Data entered into our simulators (amounts, rates, durations) is processed exclusively client-side (in your browser). No personal financial data is sent to our servers or stored.The technical architecture is designed according to the principle of "privacy by design."

For clarity, the website does not collect or process the following through its simulators: investment amounts, savings balances, income figures, tax information, or any other personal financial data.

2.2 Browsing data

When you visit the site, we may automatically collect:

  • IP address (anonymized)
  • Browser type and operating system
  • Pages visited and visit duration
  • Traffic source (search engine, direct link, etc.)

2.3 Contact data

If you contact us via email, we may collect your email address, name, and the content of your message. This data is used solely to respond to your inquiry and is retained for a maximum of 3 years from last contact, then deleted.

2.4 Server log files

Our hosting provider (Vercel) automatically collects standard server log files including browser type, operating system, referrer URL, hostname, time of request, and IP address (anonymized). This data is used for security purposes and is automatically deleted after 30 days. It is not merged with other data sources.

3. Cookies

The site uses the following types of cookies:

  • Strictly necessary cookies— Required for site functionality (session, preferences). They cannot be disabled.
  • Analytics cookies (Google Analytics)— Allow us to understand site usage (number of visitors, most consulted pages, browsing paths). IP addresses are anonymized. You can refuse them via the cookie consent banner.
  • Advertising cookies (Google AdSense)— Used to display contextual ads. These cookies may collect browsing information to personalize ads. You can refuse them via the cookie consent banner.

A cookie consent banner is displayed on your first visit, allowing you to choose which cookies to accept. Analytics and advertising cookies are only loaded after you give explicit consent. You can change your preference at any time by clearing your browser's cookies or local storage for this site.

User preferences (such as dark/light mode and consent choices) may be stored in your browser's localStorage, which is not a cookie and is never transmitted to our servers. You can clear localStorage data at any time through your browser settings.

4. Purpose of processing

The data collected is used for:

  • Improving the site (browsing analysis, most-consulted content)
  • Displaying relevant ads (site funding)
  • Responding to your requests (contact by email)
  • Ensuring the security and availability of the website

5. Legal basis

Data processing is based on the following legal bases under Article 6 of the GDPR:

  • Consent (Art. 6(1)(a)) — for analytics and advertising cookies, collected via the cookie consent banner.
  • Legitimate interest (Art. 6(1)(f)) — for anonymous browsing analysis to improve the site and for server log files used for security purposes.
  • Contractual necessity (Art. 6(1)(b)) — for processing contact requests.

6. Data retention period

  • Analytics cookies: 13 months maximum
  • Server logs: 30 days
  • Contact emails: 3 years from last contact

7. Your rights under GDPR

In accordance with the GDPR and the French Data Protection Act, you have the following rights regarding your personal data:

  • Right of access (Art. 15) — obtain a copy of your data and confirmation of whether it is being processed.
  • Right of rectification (Art. 16) — correct inaccurate or incomplete data.
  • Right of erasure (Art. 17) — request deletion of your data (“right to be forgotten”).
  • Right to restriction (Art. 18) — restrict processing in certain cases.
  • Right to object (Art. 21) — object to data processing on grounds relating to your particular situation.
  • Right to data portability (Art. 20) — receive your data in a structured, commonly used, and machine-readable format.
  • Right to withdraw consent (Art. 7) — withdraw consent at any time (e.g., by clearing your cookies).

To exercise these rights, contact us at: contact@epargnemalin.fr. You also have the right to lodge a complaint with the CNIL (French data protection authority) at cnil.fr. We undertake to respond within 30 days.

8. Data processors

The following third-party processors may handle data on our behalf:

  • Vercel Inc. — Website hosting (United States, EU standard contractual clauses)
  • Google LLC — Analytics and advertising (United States, EU standard contractual clauses)

These processors are bound by contractual obligations to protect your data in accordance with GDPR requirements. Should it become necessary to use services outside adequate jurisdictions, the controller will ensure appropriate safeguards are in place (standard contractual clauses, adequacy decisions, or binding corporate rules).

9. Data security

We implement appropriate technical and organizational measures to protect your data: HTTPS encryption in transit, access restriction, regular security updates, and anonymization of IP addresses in analytics. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Children's privacy

Our website is not directed to children under 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information.

11. Changes to this policy

We may update this privacy policy to reflect changes in our practices or applicable regulations. The date of last update is indicated at the top of this page. The current version is always available on this page. We invite you to consult this page regularly.

12. Contact

For any privacy-related questions or to exercise your rights, contact us at: contact@epargnemalin.fr