Privacy policy
Data controller
Impression Sur Demande (ISD), 23 rue Montaigne, zone artisanale Trois Mares, 97430 Le Tampon, La Réunion, France. Contact: contact@dtfforge.com.
Data we process
| Why | What data | Legal basis | Retention |
|---|---|---|---|
| Purchase | E-mail, name, country, amount, receipt (collected by Stripe) | Performance of the contract, accounting obligations | 10 years (accounting records) |
| Licence | Key, e-mail, modules, random installation ID, computer name (operating system and version of Photoshop), plugin version, activation dates | Performance of the contract | Duration of the licence, then 3 years |
| Free trial | E-mail, installation ID, computer name, encrypted fingerprint of the internet connection (never the plain IP address) | Legitimate interest: one trial per person, preventing abuse | 3 years after the trial |
| E-mailed link | E-mail, language, source of the visit, encrypted fingerprint of the internet connection (never the plain IP address) | Performance of your request; consent for product news | 30 days; 3 years if you asked for product news |
| Reviews | Name or first name, shop and country (optional), rating and review text; encrypted fingerprint of the e-mail and of the internet connection. The e-mail address itself is not kept | Consent, which can be withdrawn at any time | As long as the review is published; removed on request to contact@dtfforge.com |
| Product news | E-mail, if you ticked the box when starting the trial or requesting the link | Consent, which you can withdraw at any time | Until consent is withdrawn, at most 3 years without contact |
| Contact | Your messages and e-mail | Legitimate interest: answering you | 3 years after the last exchange |
| Ad measurement (Meta pixel) | Pages viewed, clicks on “Download” and on the purchase buttons, confirmed purchases (amount, modules), technical browser identifiers and the Meta cookies (_fbp, _fbc). A confirmed purchase is also sent by our server, with an encrypted fingerprint (SHA-256) of the e-mail address and country, the IP address and the browser | Consent, which you can withdraw at any time | Choice stored for 6 months; Meta cookie 90 days |
| Visit statistics | Page viewed, language, where the visit came from (Facebook, Google…), device type (mobile, tablet, computer), approximate country, region and city inferred from the connection address at the time of the visit (position rounded to about ten kilometres), random tab identifier, erased when the tab closes. No cookie, no IP address stored | Legitimate interest: measuring website traffic (audience measurement exempt from consent) | 25 months |
The plugin never sends your images or files: it only contacts our server to check your licence or trial.
Recipients and processors
- Stripe: payment. Stripe processes card data; we never have access to it.
- Supabase: licence server and visit statistics, data hosted in the European Union (Frankfurt).
- Google Cloud: server of our online tools (app.dtfforge.com), which receives visit statistics before they are stored, Frankfurt region.
- Cloudflare: website hosting and relay for our online tools; determines the country and approximate city of a visit from the connection address, which we do not keep.
- Resend: sending the e-mail with your key or your download link (European Union region).
- Meta Platforms Ireland: measuring the performance of our ads on Facebook and Instagram, only if you have accepted cookies.
Some of these providers are based in the United States. Transfers are covered by the safeguards provided by the GDPR (EU-US Data Privacy Framework adequacy decision or standard contractual clauses). Your data is never sold.
Cookies
With your consent, this website uses the Meta pixel (Facebook, Instagram), which sets a cookie and sends Meta the pages you view and the actions you take (download, click on a purchase button, purchase), so that we can measure and improve our ads. In that case, a confirmed purchase is also sent to Meta by our server, with an encrypted fingerprint of your e-mail address, so that it is counted even if a blocker stops the pixel from working. Without your consent, nothing is loaded or sent. Your choice is stored in your browser for 6 months; you can change it at any time with the “Cookies” link at the bottom of every page. The website loads no font from a third-party site. The Stripe payment page uses its own cookies, which are necessary for payment security.
Visit statistics
To know how many people visit the site, where they come from, which pages interest them and how many are online at a given moment, we count page views, clicks on “Download” and on the purchase buttons, and open tabs, without cookies: these figures cannot identify you and are not shared with anyone. The country and approximate city are inferred from your connection address at the time of the visit by our hosting provider; the address itself is not stored. A random identifier, unrelated to you or to any account, is kept in your browser while the tab stays open, together with the source of your visit (for example Facebook); it disappears when the tab closes. Nothing is counted if your browser asks not to be tracked (Global Privacy Control or “Do Not Track”). You can also opt out here:
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, and to withdraw your consent. Write to contact@dtfforge.com. You may also lodge a complaint with the French data protection authority, the CNIL (cnil.fr), or your local authority.