Privacy
Translation provided for information only. If there is any difference, the French version prevails.
Provisional version, being reviewed by the association’s board. What is described here is what the site actually does; the items in square brackets will be specified before the official launch.
In one sentence
FoundHow stores no personal financial data: no income, no amounts you enter, no bank details. It sets no tracking cookies, and everything can be read and done without an account.
Without an account: nothing leaves your device
Your progress in the guides (completed steps, XP, level, badges) is saved in your browser’s local storage. It is not sent anywhere and disappears if you clear the site’s data.
With an account: what we store
An account serves a single purpose: to pick up where you left off from another device. It contains:
- your email address and your password (encrypted, never readable by us);
- your profile: first name or nickname, school, city and situation (student, work-study, student job, freelancer) — the situation is only used to suggest the right guides;
- your progress: which steps of which guides are completed, and whether you have said you have done the procedure;
- a profile picture, if you add one;
- your reactions and comments on the feed, as well as the photos you post there. Comments are public and signed with your first name or nickname.
The “unlocked amounts” shown in your space are copied from the content of the guides: they are never figures you entered yourself.
Audience measurement
We use Plausible, a measurement tool with no cookies and no personal identifier: it counts page views and events (a guide started, a step completed), never a person. No consent banner is therefore needed.
Searches typed in the search bar are recorded anonymously to find out which topics are missing. Any query that looks like personal data (email, phone number, social security number, IBAN) is ignored before it is written.
Donations
Donations are made on the Support page, in a HelloAsso form displayed within our site. What you type there (name, email, bank card) goes directly to HelloAsso, which is responsible for it: it never goes through our servers, and we never see your bank details. HelloAsso sends us donors’ names, emails and amounts, so that we can thank them and keep the association’s accounts. The form only loads on this page.
Where the data is, and who can access it
Accounts are hosted by Supabase (region: [to be confirmed]), the site by Cloudflare. Only authorised members of the association can view reported comments and moderate them; nobody has access to your password. No data is sold or passed on to third parties for commercial purposes.
Data controller (responsable du traitement): [declared name of the association], represented by its president. Retention period: for as long as the account exists, then [period to be voted by the board] after deletion for technical backups.
Your rights
You can view, correct and delete your data at any time. Deleting your account is done directly from your account: it erases your profile, your progress and your contributions. For any other request (access, rectification, portability, objection), write to us and we will reply within one month.
If you believe your rights are not being respected, you can lodge a complaint with the CNIL (the French data protection authority).
Contact
Last updated: 20 September 2026.