Privacy policy
What data K-yuhan keeps, why, for how long, and your rights.
1. Who is responsible for your data
Youssef KHABA, publisher of the site, as a private individual.
For any question about your data: confidentialite@k-yuhan.com.
2. The data we keep
- Your account: email address, display name, password (encrypted, never readable), and your picture if you sign in with Google.
- Your profile: username, avatar, banner, language and visibility settings.
- How you use the site: collection, favourites, wishlist, event reminders, personal events and your last 10 searches.
- Security: IP address and browser type tied to your session, two-step verification codes if you turn it on.
- The date you accepted the terms and your confirmation that you are 15 or older.
If you visit the site without an account, we keep nothing that identifies you, except your IP address, for 24 hours at most, to stop abuse.
3. Why
- To run your account and the site (contract: the terms of use you accept).
- To protect the site and the accounts from bots and break-ins (legitimate interest).
- To send you useful emails: address check, forgotten password, warning before deletion (contract).
No advertising. Your data is never sold.
4. For how long
- Your account and everything tied to it: until you delete it, or 3 years after your last sign-in (warning 1 month before).
- A sign-in session (with its IP address and browser type): 7 days, extended when you come back, then erased.
- The IP address used to stop abuse: 24 hours at most.
When you delete your account, your data is erased right away.
5. Who can see it
The K-yuhan team (3 people), only when needed. And these providers, to run the site:
- Cloudflare (United States): hosting, database, pictures, bot protection and receiving emails.
- Resend (United States, servers in Ireland): sending the site’s emails.
- Brevo (France): sending the team’s replies when you write to us.
- Google (United States): only if you choose « Continue with Google ».
Transfers to the United States rely on the EU–US Data Privacy Framework or on the European Commission’s standard contractual clauses.
6. Cookies
K-yuhan uses two technical cookies, with no advertising: the one that keeps you signed in (essential), and the one that remembers your display settings when you are signed in (former members, animations; 1 year).
A few settings stay in your browser (for example: showing former members, your recent searches without an account).
No advertising or audience measurement cookie. That is why there is no cookie banner.
7. Your rights
At any time, you can:
- see and correct your data (in your profile);
- download your data (« Download my data » button in Settings › Account);
- delete your account and your data (in Settings › Account);
- object to a use of your data or ask to limit it.
For anything else, write to confidentialite@k-yuhan.com. We answer within 1 month.
If you are not happy with our answer, you can complain to the French data protection authority, the CNIL: cnil.fr.
8. Minimum age
You must be 15 or older to create an account. If we learn that an account belongs to someone younger, we delete it.
9. Security
Encrypted passwords, always HTTPS, optional two-step verification, limited tries against bots.
10. Changes
This page may change. The date at the top shows its last update. If a change is important, we let you know.