Privacy policy

Controller

{{OWNER_NAME}}, {{ADDRESS}}, SIRET {{SIRET}}. Contact: hello@citizenprep.org.

What we collect

Your email address and the purchase record (plan, amount, date, buyer country for accounting). A hash of your device session. If you join a waitlist: your email, the country and the language, and the time you consented.

We never collect your name, nationality, residence, immigration status or ID numbers. Your quiz answers and progress stay on your device.

Why and on what legal basis

To deliver what you bought and send access codes (contract). To keep accounting records (legal obligation). To tell you when a country opens, if you joined the waitlist (consent, which you can withdraw at any time).

Cookies and analytics

One strictly necessary cookie keeps your device signed in. We use no advertising cookies and no trackers, so there is no cookie banner. If we add visit statistics, they will be cookieless and we will say so here.

How long we keep it

Access codes: valid for 10 minutes and deleted within a day after that (only a hash is stored). Network addresses are only kept as a hash for up to 24 hours for abuse protection. Purchase records: your email is removed 12 months after your access ends; amounts and dates are kept 10 years for accounting. Waitlist: until you ask to be removed with the “Delete my data” page.

Who processes it

Cloudflare (hosting and database), Stripe (payments), Resend (email). If we add error monitoring, it will be configured without personal data and listed here. Some of these are outside the European Economic Area; transfers rely on standard contractual clauses or an adequacy decision.

Your rights

You can ask for access, correction or deletion, object to processing, and complain to your data protection authority (in France, the CNIL). You can delete your data yourself with an email code on the “Delete my data” page, or write to hello@citizenprep.org.