Privacy policy
Last updated: [publication date]
Clean & Sober pays particular attention to its members' privacy. Some information you share with the website, such as your abstinence dates or the addictions you track, relates to your health: it is handled with particular care, only with your consent and never for commercial purposes.
1. Data controller
The publisher of the Clean & Sober website (see the legal notice), reachable at contact@clean-sober.org for any question about your data.
2. Data collected
- Account: e-mail address, username, password (stored encrypted, never in plain text), language; Google identifier if you sign in with Google.
- Profile: pseudonym, avatar, and the optional information you choose to add (first name, date of birth…).
- Recovery tracking: tracked addictions, abstinence dates and milestones reached, daily commitments and check-ins, support plan, mood of the day, journal.
- Exchanges: private messages, posts on the support wall and the forum, reactions, friend requests and blocks.
- Technical data: connection and security logs (IP address, date, browser), needed for the security of the website.
3. Purposes and legal basis
- Providing the service (account, tracking, community): performance of the terms of use you accept when signing up.
- Health-related data (addictions, abstinence, mood, journal): your explicit consent, which you can withdraw at any time by deleting this information or your account.
- Website security and abuse prevention: legitimate interest.
- Information e-mails about the website (important changes, news): legitimate interest; every e-mail contains an unsubscribe link.
- Audience measurement: your consent, given through the cookie banner.
4. Who sees your data
Your tracking data is private by default. Other members only see what you choose to make visible, according to your profile and visibility settings. Your data is never sold nor used for advertising. It is only accessible to:
- the website team, for moderation and maintenance, only as far as necessary;
- our technical providers: the host [host name] (European Union) and, if you accept it, Google for audience measurement.
5. Retention period
Your data is kept as long as your account exists. When you delete your account, your personal data is erased or anonymised within [30] days, unless a legal obligation requires otherwise. Technical logs are kept for [12] months at most.
6. Security
The website is only available over an encrypted connection (HTTPS). Passwords are encrypted and can never be read, including by the website team.
7. Your rights
You can at any time access your data, correct it, delete it, get a copy of it (portability), object to some processing and withdraw your consent. Most of these actions can be done directly from your profile. For the rest, write to contact@clean-sober.org: we reply within one month.
If you consider that your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or the authority of your country.
8. Cookies
The use of cookies is detailed in the cookie policy.