Privacy policy
This English version of the privacy policy is provided for convenience. In case of discrepancy, the French version prevails.
Last updated: 13 October 2026
1. Data controller
Simon Gay EI, 11 rue de Douaumont, 42400 Saint-Chamond, France. Contact: contact@simnjs.fr.
2. Data processed
- Orders: email address, name and country entered at checkout, products bought, amounts, payment method type, Stripe transaction identifiers, date of acceptance of the terms and waiver of the right of withdrawal, number of downloads.
- Payment: card or account details are entered directly on Stripe’s page. The Seller never receives them.
- Support: the content of email exchanges.
- Technical data: connection logs (IP address, browser, requested pages) kept by the hosting providers for security.
- Preferences: the chosen language (
localecookie) and cart contents (browser local storage).
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Process orders, deliver downloads, send delivery emails and order links, answer support requests | Performance of a contract (GDPR art. 6.1.b) |
| Keep accounts and meet tax obligations | Legal obligation (GDPR art. 6.1.c) |
| Prevent fraud, secure the Site, handle disputes | Legitimate interest (GDPR art. 6.1.f) |
No data is used for advertising or profiling, or sold to third parties. No promotional emails are sent.
4. Recipients
Data is accessible only to the Seller and its technical providers, within the limits of their tasks:
- Stripe (Stripe Payments Europe, Ltd.): payments. Stripe also acts as an independent controller for fraud prevention and its regulatory obligations.
- Convex (Convex, Inc.): database and file storage.
- Vercel (Vercel Inc.): hosting of the Site.
- Resend: transactional emails.
- YouTube (Google): demo videos, only if the visitor starts a video.
5. Transfers outside the European Union
Convex, Vercel and Resend are based in the United States. These transfers rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the European Commission’s standard contractual clauses.
6. Retention
- Order data: 10 years from the order (article L123-22 of the French Commercial Code).
- Support exchanges: 3 years after the last contact.
- Technical logs: a limited period set by the hosting providers for security.
- Language cookie: 12 months. Cart: until the visitor empties it.
7. Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability, and may set instructions for your data after your death. To exercise them, email contact@simnjs.fr; you will get an answer within one month. Some data must still be kept to meet accounting obligations.
You can also lodge a complaint with the French data protection authority, the CNIL (cnil.fr), or your local authority.
8. Cookies and trackers
The Site only uses strictly necessary trackers, which require no consent:
- the
localecookie, which remembers your language; - browser local storage, which keeps your cart.
No advertising or analytics cookies are set. YouTube videos load only when you press play, in privacy-enhanced mode; YouTube may then set its own trackers. On the checkout page, Stripe uses its own cookies to secure the transaction.
9. Security
The Site is served over HTTPS, administration requires authentication, and order links rely on random, unguessable identifiers.
10. Changes
This policy may change; the update date is shown at the top of the page.