Privacy policy

Who is responsible

AURA GROUP, publisher of Hopla (see the legal notice). For any question or request: bonjour@liliansevoumian.fr.

If you visit a page

No cookie is set, no ads, no tracker across sites. The server counts the page’s views and clicks for its owner, with an anonymous fingerprint renewed every day, and your country, which Cloudflare infers from your connection; your IP address is not stored. Your country is also used, for the duration of the visit, to show or hide the links the owner restricts to some countries. These analytics are kept for 13 months. This is a strictly limited audience measurement, which falls under the consent exemption set by the CNIL (the French data protection authority).

A video player (YouTube, Vimeo, TikTok) or music player (Spotify, Apple Music, Apple Podcasts, Deezer, SoundCloud), the map of an address (Google Maps), like the calendar of a booking (Calendly, Cal.com, Google Calendar), only loads in the page if you tap it: that service then applies its own rules, cookies included. The latest posts of a blog or podcast, and the latest video of a channel, are read by Hopla’s server: your browser only contacts that site if you open a post. A product, a support button or a link takes you to another site, which has its own rules; if the page owner chose it, that link tells the destination site you come from Hopla (utm_source=hopla), without saying anything about you.

You can object: a browser that blocks requests to hopla.page/api/evenement (most content blockers allow it) is not counted, and the page keeps working. The page owner is responsible for these analytics; Hopla processes them on their behalf.

If you sign up to a page’s list (“Join my list”), your address and, if asked, your first name go to its owner, who alone decides which emails to send you; they may pass them to their sending or automation tool (Brevo, Mailchimp, Kit, Substack or Make, for example). If the page offers a gift for signing up, its link opens once you give your address, on the site where the owner put it. To unsubscribe or have your address erased, write to them, or to bonjour@liliansevoumian.fr.

If you write through “Contact me”, your name, address and message go by email to the page owner, who replies to that address; Hopla doesn’t keep them. Saving a contact card to your contacts tells Hopla nothing about you.

For a restricted-access link (drop mode), Hopla keeps, to count the spots, an encrypted fingerprint specific to that link, derived from your IP address and browser: it serves only that purpose, doesn’t allow following you from one link to another, and is erased after thirteen months.

If you reserve your name

Your email address and the chosen name, to hold that name for you, confirm the reservation and send you your invite. Legal basis: your request (pre-contractual measures). Kept until your invite, and erased after one year at most. To erase them sooner, reply to the confirmation email or write to bonjour@liliansevoumian.fr.

If you have an account

Your email address, your username, the creation and last login dates, the version of the terms you accepted, and what you publish (settings, blocks, images). Legal basis: performance of the contract (the terms of service). This data is kept as long as your account exists, and erased as soon as you delete it. A page you never enter (no login link used) is erased with your address one month after its creation, once the links sent to you and any plan offered to you have expired: its name becomes free again.

If you pick a paid plan: the customer, subscription and product IDs Creem sends us, the subscription status and its renewal date, to know which plan your page has. Your name, billing address, card and invoices stay with Creem, which is responsible for them for payment and billing. Deleting your account cancels your subscription with Creem; if Creem doesn’t confirm it, the publisher receives your username and these IDs by email, long enough to cancel it by hand.

If the publisher offers you a plan: which one, the day it was offered and its end, to know which plan your page has.

Login links and sessions are only kept as a fingerprint, and erased when they expire (15 minutes, 24 hours for a link the publisher sends you, 7 days for an invite, 90 days for a session).

If you report a page

The reason, your explanation and, if you give it, your email address, to keep you informed of the decision. Legal basis: the legal obligation to handle reports (Digital Services Act). Kept for one year after the decision.

Protection against attacks

Visits to hopla.page and to the dashboard go through Cloudflare, which stops attacks and bots before the server. Cloudflare then sees your IP address, your browser and the address requested, long enough to route the request; it sets no cookie. Legal basis: Hopla’s legitimate interest in protecting the service and the people who use it.

Public forms (login, page creation, report, “Join my list”, “Contact me”) also go through Turnstile, Cloudflare’s anti-bot check. It only loads when you use one of them, and only shows a checkbox to a visitor deemed suspicious.

Where the data goes

Nowhere other than the subprocessors listed on their page: the host, the email delivery service, and Cloudflare, which protects the service. For a subscription, Creem receives your email address at payment time. Nothing is sold or shared for advertising.

Your rights

You can access your data, correct it, erase it, get it in a machine-readable format, object to a processing or ask for it to be restricted. With an account, export and deletion take one click in the Settings tab. For the rest, write to bonjour@liliansevoumian.fr: answer within one month.

You can also file a complaint with the CNIL (cnil.fr), or with your own country’s data protection authority, if you believe your rights are not respected.

Language

This is an English translation, provided for convenience. The French version is the one that legally applies: in case of any difference, it prevails.