Privacy Policy

Last updated: April 2026

Data Controller

Flunes is operated by Alex Quach, entrepreneur individuel, registered at 17 Avenue d'Italie, 75013 Paris, France (SIREN 103 907 564). For privacy inquiries, use the live chat widget on our website or reach out through the contact options listed on our Legal Notice page. Flunes acts as the data controller for personal data processed through the service.

Data We Collect

When you use Flunes, we collect: your email address and name (via GitHub OAuth), screenshots you upload, and feedback submission content. For collaborators invited to submit feedback: we collect the name and email provided by the inviting developer, the feedback content submitted, and any screenshots or attachments included in submissions.

Technical Context on Feedback Submissions

With each feedback submission, we automatically capture basic technical context about the device used to submit it: the browser and user-agent string, the operating system, the screen and window size, the language, the time zone, and the referring page. This information is stored as part of the submission and helps the development team reproduce and fix the reported issue. We do not collect any IP address, device fingerprint, or tracking cookie for this purpose.

Legal Basis

We process developer data based on contract performance (to provide the service). We process collaborator data based on our legitimate interest in collecting and managing feedback submitted through the platform. Where required by law, we obtain explicit consent before processing personal data.

Third-Party Processors

Your data is shared with the following third-party processors, all of which comply with GDPR through Standard Contractual Clauses or equivalent mechanisms: Supabase (database and object storage, hosted in the EU), Resend (transactional email delivery), Tawk.to (live chat widget), Polar (payment processing and billing, acting as Merchant of Record), PostHog (privacy-friendly product analytics, EU hosting), Cloudflare (infrastructure and CDN), and GitHub (issue tracking and repository integration). We also use AI providers (DeepSeek, Google Gemini, Groq, or OpenRouter) to structure feedback submissions into cleaner GitHub issues; these providers process submission text only and do not retain it for training.

Data Retention

Your account data is retained while your account is active. Feedback submissions are retained indefinitely to maintain a record of resolved issues and for audit purposes. You may request deletion of your account and associated data at any time via the live chat widget on our website. We will respond within 30 days as required by GDPR.

Your Rights

Under GDPR (Articles 15 to 22), you have the right to access, rectify, erase, restrict processing, and port your personal data, as well as the right to object to processing. To exercise these rights, use the live chat widget on our website or the contact options listed on our Legal Notice page. You also have the right to provide instructions regarding the use of your data after your death.

Complaints

If you believe your rights have not been respected after contacting us, you may file a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés) at 3 Place de Fontenoy, 75007 Paris, France, or via cnil.fr.

Cookies

We use essential cookies for authentication (Supabase Auth) and locale preference. We also use PostHog for privacy-friendly product analytics, which does not use advertising cookies or track personal data across sites. You can manage cookie preferences at any time via the cookie consent banner displayed when you first visit the site.