Privacy policy

Who is responsible

Alexandre Le Borgne, entrepreneur individuel (sole proprietor under French law, micro-entrepreneur), publisher of Git Lucky, is the data controller. Contact: contact@gitlucky.dev.

Release announcement list

If you sign up on our home page, we keep your email address, the date you signed up and gave your consent, and which of the page's two forms you used. We use your address for one thing only: sending you one email when the first version of Git Lucky is released. The legal basis is your consent.

We send that email from our own server, hosted by OVH SAS in France: no mailing service receives your address. Once the email is sent, we delete the list. If no version is released within twelve months of your sign-up, your address is deleted then.

You can withdraw your consent at any time, with the unsubscribe link in the email or by writing to contact@gitlucky.dev. Your address is then deleted.

What we collect, and why

• What your sign-in provider sends us when you sign in with Google or GitHub: your account identifier at that provider, your verified email address, your name and your profile picture. We never receive your password. Used to create your account, recognise you at your next sign-in, and link a Google and a GitHub account that share the same verified email address.
• Your subscription (Stripe customer and subscription identifiers, status, currency, trial and period end dates): to know whether you can use Git Lucky, and whether you already had your free month.
• The email addresses your account has used, with the dates, and the address that started your free month: to grant one free month per person, including after you change your address or delete your account.
• Gifted access: the license keys you used and the access they gave, with their dates.
• Your computers: the name you gave them, operating system, processor architecture, Git Lucky version, last check date, and a fingerprint computed on your computer from its identifier (the identifier itself never leaves it). Used to apply the two-computer rule.
• Technical logs of our server (IP address, requested page, date): for security and troubleshooting.

We process these data to perform the contract you entered into (account, subscription, gifted access), to meet our legal obligations (invoices) and, for logs, on the basis of our legitimate interest in keeping the service secure.

Git Lucky itself does not send us your repositories, your code or your Git history. It only contacts our server to sign in to your account and check your subscription.

Payments

Payments are handled by Stripe, which collects your payment details directly under its own privacy policy. We never see your card number.

Who receives your data

• OVH SAS (2 rue Kellermann, 59100 Roubaix, France), which hosts our server in France.
• Google or GitHub, only for the sign-in you choose; they process it under their own privacy policies.
• Stripe, for payments and invoices. Stripe may transfer data outside the European Union under the safeguards provided by the GDPR.

We never sell your data and use no advertising or analytics trackers.

How long we keep it

• Release announcement list: until the announcement is sent, and at most twelve months after you signed up.
• Account, gifted access and computers: as long as your account exists, then three years after your last sign-in or the end of your subscription, whichever is later.
• Invoices and accounting records: ten years, as required by French law.
• Address history and free-month record: kept after your account is deleted, without any link to it, as long as free months exist, on the basis of our legitimate interest in preventing abuse.
• Server logs: fourteen days.
• Sessions: thirty days. Requests to sign in a computer: fifteen minutes.

Cookies

We use a single cookie, set only when you sign in, to keep you signed in. It is strictly necessary for the service, so it does not require your consent.

Your rights

You can access, correct, delete or export your data, object to its processing or restrict it, by writing to contact@gitlucky.dev. You can also lodge a complaint with the French data protection authority, the CNIL (cnil.fr).