Privacy policy

What we collect, and nothing more

If you subscribe to the newsletter: your email address, the language of the page you were on, and the page you subscribed from.

If you claim a château entry: your work email address, the message you leave us, and a fingerprint of your IP address — salted and hashed, therefore not reversible — used solely to limit the number of attempts.

If you report an error: the content of your report, and your email only if you choose to give it.

If you request an API key: your email, your organisation and the intended use.

We never ask for a name, a postal address or a phone number, and we do not keep IP addresses in the clear.

Why, and on what basis

Newsletter subscriptions rest on your consent, which you withdraw with one click in every message.

Entry claims and key requests rest on performing the relationship you initiated.

Professional contacts of château managers, collected from public official websites, rest on the legitimate interest in having the information we publish about them checked. An unsubscribe link appears in every message, and a removal request is handled immediately.

Where the data goes

All data is stored with Supabase Inc., in the eu-west-1 (Irlande, Union européenne) region.

Transactional emails are sent through Resend, in a European region as well.

Audience measurement uses Google Analytics 4 with IP anonymisation. No identifying data is passed to it.

We do not sell, rent or trade any data. There is no ad network on this site.

For how long

A subscriber address is kept for as long as the subscription lasts, then three months after unsubscribing so we do not re-add you by mistake.

An unsuccessful claim is deleted after twelve months.

IP fingerprints used for rate limiting are deleted after thirty days.

A word on the publisher and the GDPR

This site is published by Nanogramme LLC, a company established in the United States. The General Data Protection Regulation nonetheless applies to this processing, since the site addresses a European Union audience — the publisher being established outside the Union changes nothing.

Accordingly, data is hosted within the Union, and the rights described below are exercised on the same terms as with a European publisher. Designation of a representative in the Union under Article 27 is under way.

Your rights

You may at any time request access to your data, its correction, its deletion, or object to its processing. One address, an answer within thirty days: rgpd@chateaupedia.com