Information
Privacy Policy
Last updated : 13 October 2026 · Version française
This policy explains how Dossier Rouge processes your personal data when you use the Dossier Rouge app (Android, then web and desktop) and the website dossierrouge.com. We collect only what the service needs to work, and we never sell your data.
1. Who is responsible for your data?
The data controller is [publisher's name or company name, address], publisher of Dossier Rouge (see thelegal notice). Questions and requests: contact@dossierrouge.com.
2. The data we process
| Data | Why | Legal basis |
|---|---|---|
| Account: name or nickname, email address, password (never stored in plain text). If you sign in with Google, Facebook or TikTok: the identifier, name and email that service shares with us. | Create and secure your account, let you sign in. | Performance of the contract |
| Usage: listening progress, stories in your list, ratings you give, story language, settings. | Resume a story where you left it on all your devices; show your list. | Performance of the contract |
| Devices and sessions: device type and name, last sign-in date. | Limit an account to 3 devices, let you manage them, protect your account. | Performance of the contract, legitimate interest (security) |
| Subscription: chosen offer, status (trial, active, expired), dates. Payment is handled by Google Play: we never see your payment details. | Unlock Premium, manage the free trial and renewals. | Performance of the contract |
| Advertising (free version only): device advertising ID, IP address, technical device information, processed by Google AdMob; your consent choice. | Show the ads that fund the free version. | Consent (personalised ads), legitimate interest (non-personalised ads) |
| Analytics and crash reports: usage events (story opened, story finished…), device model, app version, error reports. | Understand what people enjoy, fix bugs, count plays ("Most popular"). | Legitimate interest; consent where the law requires it |
| Notifications: the device's notification token. | Tell you about a new story or the end of your trial. You can turn them off at any time. | Consent |
| Your messages: emails you send us. | Reply to you. | Legitimate interest |
The website uses no analytics or advertising cookies. YouTube videos only load if you press play (see thecookie page).
3. Who receives your data?
Only the Dossier Rouge team and the providers that help us run the service:
- Our server (database and accounts, Appwrite software that we host ourselves): at [server host, country].
- Backblaze: storage of story files (pictures, voice), in the European Union (Amsterdam).
- Google: Google Play (download, payments), Sign in with Google, AdMob (ads in the free version), Firebase (notifications, analytics, crash reports).
- RevenueCat: manages subscriptions between Google Play and your account.
- Meta (Facebook Login) and TikTok (TikTok Login), only if you choose those sign-in methods.
- Cloudflare: website hosting and security of our domains.
- An email delivery service (verification and password-reset emails).
Some of these providers (Google, Meta, TikTok, RevenueCat, Cloudflare) may process data outside the European Union, in particular in the United States. These transfers rely on the safeguards provided by the GDPR (EU–US Data Privacy Framework or the European Commission's standard contractual clauses).
4. How long do we keep it?
- Account, progress, list, ratings, devices: as long as your account exists. They are deleted as soon as you delete your account.
- Technical backups: [30 days at most], then erased.
- Technical (security) logs: 12 months at most.
- Purchase data: kept by Google Play and RevenueCat according to their legal (accounting and tax) obligations.
- Aggregated play statistics (number of plays per story): kept without any link to your identity.
5. Security
All communication is encrypted (HTTPS). Passwords are never stored in plain text. Stories downloaded for offline listening areencrypted on your phone (AES-256) with a key protected by the device, and cannot be read outside the app.
6. Your rights
You can access, correct and erase your data, restrict or object to its processing, ask for portability and withdraw your consent at any time. For advertising, use Account → Privacy choices in the app. To delete your account and data, seeAccount deletion.
Write to contact@dossierrouge.com: we reply within one month. If you believe your rights are not respected, you can complain to your data protection authority (in France, the CNIL: cnil.fr).
7. Minimum age
Dossier Rouge tells real stories that can be hard (crimes, wars, disasters). The service is for people aged 16 and over. We do not knowingly collect data about younger children.
8. Changes
We may update this policy, for example when a feature is added. The update date is shown at the top of this page; for important changes, we let you know in the app.