Privacy policy

1. Data controller

Data processing is carried out by Thomas Feutren, operator of Tapotons. You can contact us at contact@tapotons.fr.

2. Collected data

Tapotons only collects data strictly required to provide the service:

No sensitive data is collected. Payment data is processed by Stripe and never stored by Tapotons.

• login data (email, hashed password)
• first and last name when voluntarily provided
• subscription status and payment history
• learning preferences and progression data

3. Purposes and legal basis

Your data is used to:

• create and manage your account (contract performance)
• provide access to content and features (contract performance)
• handle support requests (legitimate interest)
• comply with legal and tax obligations (legal obligation)

4. Retention period

Account data is retained while you use the service and then deleted within up to 3 years after account deletion or last activity, except where legal retention obligations apply.

5. Data recipients

Data is only accessible to authorized Tapotons staff and essential providers (hosting, payment, messaging, anti-abuse).

6. Security

Technical and organizational measures are implemented to protect your data. No system is infallible; use a strong password.

7. Your rights

Under GDPR, you can request access, rectification, deletion, restriction, objection, and portability.

If needed, you may lodge a complaint with your data protection authority.

8. Cookies and trackers

Tapotons uses necessary cookies and optional analytics cookies.

hCaptcha secures forms. PostHog is used for analytics and session replay.

You can change your preferences at any time with the button below.

• Necessary cookies: required for login and security
• Optional analytics cookies: usage measurement and session replay
• Replay retention is limited to a maximum of 30 days

9. Policy updates

This policy may evolve to reflect service updates or legal requirements. Significant changes are communicated by email or in-product.