TROUÉ · OFFICIAL DOCUMENT
PRIVACY POLICY.
Last updated: September 7, 2026
Data controller
LOSAN CONSULTING, entreprise unipersonnelle à responsabilité limitée (EURL) au capital social de 500 euros
36 rue Mathis, 75019 Paris, France.
Contact : contact@troue.fr
Data collected
| Category | Data | Source |
|---|---|---|
| Account | e-mail address, first name or alias, optional city | provided by you |
| Entries | submitted photographs, titles, event, timestamped declaration | provided by you |
| Activity | ratings, reactions, duels, leagues, badges earned | generated by your use |
| Technical | IP address, device identifier, connection timestamps, browser type | collected automatically |
| Preferences | language, notification settings | provided by you |
| Grand Prix | annual champion’s postal address, only after the result | provided by the champion |
We never collect at registration: last name, date of birth, banking details or precise location data. A postal address is never requested at registration or before the result. It concerns only the annual champion, meaning one user per year, and is requested only after the result. EXIF metadata in photographs, which may contain GPS coordinates, is fully removed before storage.
Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Account creation and management | performance of the contract |
| Contest organisation and publication of leaderboards | performance of the contract |
| Content moderation and protection of minors | legitimate interest and legal obligation |
| Prevention of fraud and automated voting | legitimate interest |
| Retention of identification data | legal obligation |
| Wednesday provisional leaderboard and monthly verdict | explicit consent, revocable at any time |
| Grand Prix frame delivery | performance of the contract |
| Aggregated audience measurement | legitimate interest |
The reminder is sent at most once each Wednesday at 8 PM Paris time. It is skipped when the monthly verdict falls less than forty-eight hours later. You may choose the reminder and verdict, the verdict only, or no email. Deliveries, unsubscribes and complaints are measured without third-party pixels or advertising trackers.
Recipients
Your data is never sold, rented or disclosed for advertising purposes.
It is accessible to the publisher and the providers used: Sites/OpenAI and Cloudflare for hosting and storage, Supabase for sign-in, Resend for email, and Sightengine for photo analysis. Photos are sent to Sightengine for automated checks and then reviewed by a moderator before publication.
It may be disclosed to judicial authorities upon a valid legal request.
Transfers outside the European Union
Some providers may process data outside the European Union, including in the United States. Information about processing locations and applicable contractual safeguards can be requested from contact@troue.fr.
Retention periods
| Data | Period |
|---|---|
| Account | registration period; profile hidden immediately on a deletion request, followed by data and authentication-account cleanup |
| Photographs | three closed sessions, counting the submission session. Exception: only photos ranked first in a monthly or annual result are retained for three years after their latest title, then deleted |
| Ratings and reactions | deleted during account cleanup; previously declared results remain frozen, without a named profile |
| Identification and connection data | period required by applicable law |
| Reports and moderation decisions | three years; report free text erased 90 days after closure |
| Annual champion’s address | until shipping, then immediate deletion; deletion when the claim period expires if no address is supplied |
This period is shown before each submission. For photographs already present at this update, the first historical purge takes place after participants have been informed and a transition of at least 30 days. Copies downloaded or reshared outside Troué cannot be remotely deleted by the service.
Your rights
You have rights of access, rectification, erasure, restriction, objection and portability.
- Access and portability: a JSON export of account and activity data can be requested from your account. The link expires after 24 hours; the file is subsequently removed by the cleanup task. For photographs or additional data, contact contact@troue.fr.
- Erasure: a request from your account immediately hides your profile and photos, including winners, then initiates technical erasure. A provider incident can delay this second step; the administrator tracks requests until resolved. Pseudonymised technical references remain for result integrity and proof of processing.
- Other rights: write to contact@troue.fr.
You may lodge a complaint with the French Data Protection Authority (CNIL), 3 place de Fontenoy, 75007 Paris, France, www.cnil.fr.
Cookies and trackers
The browser stores the sign-in session, language, installation preferences and a device identifier used to limit abusive ratings and reports. These elements support authentication, the requested service and its security.
Troué adds no advertising tools. Administrator indicators are calculated from entries, retained ratings and reports recorded by the service, without advertising pixels.
Security
Data is encrypted in transit and at rest. Access to production data is restricted and logged. If a data breach is likely to create a risk to your rights, you will be informed promptly.
The annual champion’s address is encrypted separately. Only the people handling delivery may view it.
Minors
The service is strictly reserved for adults. No account is opened for anyone under eighteen. Any account identified as belonging to a minor is deleted together with its data.