Privacy policy

Data controller

Tom Debout, Sole trader (French micro-entreprise), SIREN 918 898 925. Contact: contact@november-club.com.

What we collect and why

Account: email address and password (stored hashed, never in plain text), to sign you in. Legal basis: performance of the terms of use.

Profile: nickname, date you accepted the terms and confirmed you are an adult. Your nickname is visible to members of your groups. Legal basis: performance of the terms and proof of acceptance.

Groups: groups you create or join, level, settings, prediction (private), “donation done” boxes (private) and solidarity donations you enter. Legal basis: performance of the terms.

Entries: each entry (yes or no, and its context: solo, with a partner, asleep). This is data about your sex life (GDPR, art. 9). It is used only to compute your counter and your groups’ standings. Legal basis: your explicit consent, given separately before your first entry and withdrawable at any time.

Technical data: IP address and browser linked to your session, and anti-abuse counters, to keep the service secure. Legal basis: legitimate interest (security).

Who sees what

Members of your groups see your nickname and your total, depending on the group’s level and standings visibility. No one but you sees the details or context of your entries, your prediction or your donation boxes. For the loser’s donation, the group only sees the total pledged.

No targeted advertising, no reselling, no advertising trackers. Your data is never used to profile you.

Retention

Entries: deleted on December 31, 2026 at the latest, or immediately if you withdraw your consent.

Account, profile and groups: until you delete your account. Accounts with no sign-in for 2 years are deleted.

Technical session data: for the duration of the session.

Hosting and transfers

The database is hosted in Paris (European Union) by Supabase. The application runs on Vercel (United States): data passing through its servers is covered by the EU–US Data Privacy Framework and the European Commission’s standard contractual clauses.

Cookies

Only two cookies, strictly necessary or preference cookies: your sign-in session and your chosen language. No advertising or analytics cookies, so there is no banner to accept.

Your rights

You can access, correct, delete, restrict, object to and port your data, and withdraw your consent at any time, without consequence. In the app: “Withdraw my consent” deletes your entries, “Delete my account” deletes everything.

For any request: contact@november-club.com. We reply within one month. You can also complain to the CNIL, the French data protection authority (cnil.fr).

Minors

November Club is for adults only. If you are under 18, do not use the service. If we learn that an account belongs to a minor, it is deleted.