Privacy policy

VitalCipher is published from France and its servers are in France. Your data is therefore governed by the General Data Protection Regulation, whichever country you read from, and the supervisory authority you can complain to is the French CNIL. This page is the English version of the same policy, not a different one.

The controller for personal data collected on vitalcipher.com is VitalCipher, publisher of the site (see the legal notice).

Contact: admin@vitalcipher.com

• Email address: required to send you the newsletter you subscribed to.
• First name (optional): to address you by name.
• Profile test answers (/en/longevity-150): if you complete it, your answers are stored to produce your result page and its analysis.
• Delivery and open statistics: our email provider, Resend, reports which emails were delivered, opened or clicked. Those signals help us improve the newsletter and spot inactive readers.
• Signed technical cookies (HMAC): see the dedicated section below. No advertising cookie, no third party tracker.

Your data is collected and processed in order to:

• Send you the newsletter you subscribed to (legal basis: consent, collected through the subscription form and confirmed by email).
• Adapt the content (first name, language, free or premium version) and improve editorial quality (legal basis: legitimate interest, subject to your right to object).
• Recognize you as a subscriber while you browse the site (identity cookie signed with HMAC, see below).

No data is sold, traded or used for advertising. No affiliate partnership, no commission on any sale.

Your data is processed by the following subprocessors, chosen for their technical guarantees and their GDPR compliance:

• Resend (email delivery and deliverability statistics), based in the United States. The transfer is covered by the European Commission's standard contractual clauses.
• Cloudflare R2 (storage of the illustrations used in the newsletter). Data encrypted at rest.
• OVH (hosting of the database and the web application), servers located in France.

No other recipient. No data is passed to any commercial third party.

• vc_id: identity cookie signed with HMAC, 30 days. Lets us recognize you if you come back to the profile test or another form, so you do not retype your email and first name. No advertising data.
• vc_fiches (premium subscribers only): session cookie signed with HMAC, 30 days. Gives access to the premium Atlas without a password.

No advertising cookie, no third party cookie, no commercial analytics tool. For these strictly functional cookies alone, no consent banner is legally required.

The tests (sleep, caffeine, meals, water, exercise) run all their calculations in your browser. The times, amounts and figures you enter are never sent to our servers or to any third party. We do not keep them.

If you ask for it yourself (“Save my profile”, “Keep in my summary”), your optional profile (sex, age, weight) and your results are kept in your browser's local storage (vc-bilan-v1), on your device only. VitalCipher has no access to it. This storage only serves the feature you ask for, so it requires no prior consent. You can delete it at any time with “Delete my data” on the My summary page, or by clearing the site's browsing data.

When you share a result, the link only holds the three figures shown on the share card, never your profile. The share image is computed on demand from that link and is not kept.

Visits to these pages are counted like those of the rest of the site, anonymously. We also count a few actions (results shown, result kept, share, subscription) as simple daily totals: no value you enter, no identifier, no IP address.

Your data is kept as long as you are subscribed to the newsletter. When you unsubscribe, your address is marked inactive and is no longer used for sending.

On explicit request to admin@vitalcipher.com, your record can be permanently anonymized: personal data erased, only aggregate statistics kept, with nothing traceable back to you.

Under the General Data Protection Regulation and the French data protection act, you have the following rights:

• Right of access to your data
• Right to rectification
• Right to erasure, the right to be forgotten
• Right to object to processing
• Right to data portability
• Right to withdraw your consent at any time

To exercise any of them, write to admin@vitalcipher.com. Answer within 30 days at most.

You can also lodge a complaint with the French supervisory authority, the CNIL.

Every email carries an unsubscribe link in its footer. One click is enough. No justification is asked for.

This policy may change. The date of the last update appears at the top of this page. Substantial changes are notified by email.