Privacy Policy

The controller of personal data is the nonprofessional publisher of Calculator 360. Contact: lm-contacter@gmail.com.

Processing activities

Calculators and text tools

Values needed by server-based calculators and text counters are sent to the server to provide the requested result (legal basis: performance of the requested service). English text counters also send text for live counting while you type. These values are required for that result, are not stored by the application, and are used only by the service. No transfer outside the European Union has been identified for this application processing; the hosting provider's logs still need to be checked.

Passwords and QR codes

Password generation and testing, QR code creation and scanning, and image resizing run locally in the browser where available in English or French. Passwords, QR content, images, and video streams are neither sent to nor stored by the server. Camera access is requested only after an action and explicit browser permission, which you may decline.

Geolocation

Some French tools ask for explicit browser permission after you take an action. You may decline and enter a town or coordinates instead. To identify a town, latitude, longitude, and accuracy are sent temporarily to the server and then to IGN's Géoplateforme (purpose: reverse geocoding; legal basis: consent). These data are optional, are not stored by the application, and are excluded from analytics. Recipients are the technical publisher, hosting provider, and IGN. Any transfers outside the EU by these providers still need to be checked.

Salary simulation

In the French salary tool, the amount, conversion direction, and status you enter are sent by the server to the Mon-entreprise / Urssaf API (legal basis: performance of the requested service). These fields are required for that calculation, are not stored by the application, and are not directly identifying. Recipients are the technical publisher, hosting provider, and Urssaf. No transfer outside the EU has been identified in the code.

Internal audience measurement

This module is disabled by default. If enabled, the legitimate interest in improving and securing the service would support collection of technical events: page without query parameters, page type, language, device category, country if derived from a trusted proxy header, reduced referring domain, usage and calculation states, errors, and duration. The module uses no person or session identifier, ignores IP addresses, and stores neither inputs nor results.

The configuration provides for 14 days of raw logs, but deletion after aggregation requires daily execution of the maintenance command. Daily, monthly, and yearly aggregates currently have no automatic purge. The module must remain disabled until a retention policy appropriate to any reidentification risk is defined and implemented. Aggregates that are not truly anonymous would need a maximum retention of 25 months, consistent with the French CNIL's recommendation for information collected by audience-measurement tools exempt from consent; this limit is not yet enforced by an automatic purge. Recipients would be the publisher and hosting provider. No third-party analytics provider or transfer outside the EU has been identified.

Technical logs

OVH SAS may process the IP address, time, requested resource, browser, and error information to keep the service secure and operational (legitimate interest). These data are collected automatically. The exact retention period and any transfers outside the EU depend on the OVH services subscribed to and must be checked in the hosting contract. The project provides for private PHP logs but does not set their rotation or retention period.

Emails

Information sent voluntarily is used only to process the request (legal basis depending on its subject: consent, precontractual steps, or legitimate interest). It is optional and retained for the time needed to handle the request and any resulting legal obligations. The mailbox lm-contacter@gmail.com is provided by Google. Google processes messages and may transfer data outside the European Union under the legal safeguards described in Google's privacy policy.

Cookies and browser storage

The audited code sets no first-party cookies and uses neither localStorage, sessionStorage, IndexedDB, nor fingerprinting. Theme and calculation state remain in temporary memory. No advertising network is enabled in version 1. No tracker requiring consent has been identified, so no cookie banner is displayed.

Your rights

Where the legal conditions apply, you can request access, correction, deletion, or restriction of processing, or object to processing, by writing to lm-contacter@gmail.com. You may also contact the French CNIL.

Changes

This policy must be updated before advertising, a third-party tracker, or a new processing activity is enabled.

Last updated: September 26, 2026.