EN
EN FR
Back to home

Website Privacy Policy

Last updated:

Looking for the app document? See the NoStatic App Privacy Policy.

1. Data Controller and Scope

Nicolas HOMS EI, a sole trader operating under the trade name Inchoms, is the data controller for website visits, contact requests, support communications and requests to exercise rights concerning data held by the publisher. Address: 16 rue Robert Glétron, 53480 Vaiges, France. SIREN: 105 993 349. Privacy contact: privacy@nostatic.app.

This policy covers the website and communications with the publisher. It does not govern the app’s local operation or the data stored on your device, which belong to the separate app privacy document.

2. Website Visits and Technical Information

The website presents NoStatic. It currently has no web user account, form, newsletter, advertising or tracker-based audience measurement integrated by Inchoms.

Visiting the website requires technical information to be exchanged with the hosting provider: IP address, date and time, requested resource, response status and technical information sent by the browser, depending on the actual configuration. Access logs may be used to operate the website, investigate failures and protect the service against abuse.

These operations are based on Inchoms’ legitimate interest in maintaining the website’s availability and security, while limiting information and access to what is necessary. Inchoms does not use the data to create advertising profiles of visitors.

The website uses local resources and does not install advertising or analytics trackers on behalf of Inchoms. No cookie consent is requested for such trackers because they are not integrated. This situation will be reassessed before any service using trackers is added.

3. Contact, Support and Privacy Requests

If you contact Inchoms, your email address, your name if you provide it, the message content, attachments and information needed to follow up on your request are processed to respond to you. You may voluntarily provide technical details such as an app version, device model, operating system version, steps to reproduce a problem or a screenshot.

Contacting Inchoms is optional. To reply by email, we need a working email address and enough information to understand your request. Your name, phone number, screenshots, attachments and technical details are optional unless a specific detail is necessary to investigate your particular issue. We will explain any additional information needed. Without sufficient information, we may be unable to reply or resolve the issue.

Avoid sending medical information, passwords, identity documents or data about third parties when they are not necessary for your request. NoStatic does not provide a medical consultation or emergency service.

Ordinary requests are processed on the basis of the legitimate interest in answering questions and providing support. When a request concerns pre-contractual steps taken at your initiative or the performance of a contract, the necessary processing is based on that ground. Requests to exercise data protection rights are processed on the basis of applicable legal obligations. Your contact details are not automatically added to a marketing list.

4. Recipients and Email Services

The information is accessible to Nicolas HOMS and only to authorized persons when their involvement is necessary. Technical service providers may process the data necessary for their services, according to their respective roles and terms.

Service providers may use authorized sub-processors to operate, maintain and secure their services. Zimbra includes automated spam and malware filtering. Messages reported as spam or incorrectly classified may be analysed by OVHcloud and shared with partners involved in this filtering, including their content and metadata, as described in the Zimbra service terms.

Inchoms does not sell data from these communications. Limited disclosure may occur when necessary to comply with a legal obligation or defend legal rights.

5. Processing Locations and Transfers

The website runs on Scaleway Serverless Containers in the Paris region, France. The configured Cockpit logging source is also in the Paris region. OVHcloud states that emails hosted through its email service are stored in France.

Storage location and processing location are not necessarily identical. Operating, maintaining and securing these services may involve authorized sub-processors and remote access, including from outside the European Economic Area (EEA), depending on the service and the parties involved.

The providers’ data processing agreements govern their processing on behalf of Inchoms. Where international transfers occur, the applicable safeguards depend on the destination and processing involved. The contractual arrangements include European Commission Standard Contractual Clauses where applicable, together with the required technical and organisational safeguards.

Details of the providers’ contractual safeguards and authorized sub-processors are available in Scaleway’s data processing documents and sub-processor list, and OVHcloud’s data processing agreement and service terms.

For questions about these arrangements or to request information about the applicable transfer safeguards, including how to obtain a copy, contact privacy@nostatic.app.

6. Retention and Deletion

Ordinary Contact and Support Requests

Ordinary contact and support requests are kept while they are being handled, then for up to 12 months after the request is closed. Information that is no longer needed is deleted earlier. Records are reviewed quarterly.

Data Protection Rights Requests

Information needed to handle a data protection rights request is kept while the request is being processed. Once it is closed, only a minimal record needed to demonstrate how it was handled is retained for up to 12 months, unless the legal obligation or dispute exception below applies. This record is limited to a reference identifying the request, its subject, the dates received and answered, and the action taken. Unnecessary attachments and copies of the underlying personal data are removed.

Identity documents are not routinely requested. If an identity document is exceptionally needed to resolve reasonable doubts about the requester’s identity, it is deleted once verification is complete, unless retaining specific information from it is strictly necessary for a documented legal obligation or dispute. In that case, only the necessary information is retained.

Legal Obligations and Disputes

Where a specific legal obligation or an actual or reasonably anticipated dispute requires certain information to be kept longer, only the relevant records are retained separately, with access limited to those who need them. The retention period is determined by the applicable statutory requirement or limitation period, taking account of any suspension or interruption and any ongoing proceedings. The reason and review date are recorded, and the information is deleted when it is no longer needed for that purpose. These exceptions do not justify retaining every contact or support message.

Technical Logs

Logs sent to the configured Scaleway Logs source in the Cockpit displayed in the PAR region have a retention period of 7 days. No export is configured and no custom source is displayed in that Cockpit.

That Cockpit also shows a 31-day retention period for Scaleway Metrics. This does not establish that those metrics contain personal data. The Cockpit region does not establish the container’s region, and these settings do not describe retention across every possible infrastructure layer or provider service.

Service Provider Retention

The periods above describe Inchoms’ handling of correspondence and request records. Service providers may apply separate retention rules for security filtering, technical copies and legal obligations, as described in their service terms. Deleting a message from the mailbox does not necessarily delete every provider-held technical copy immediately.

7. Your Rights

Depending on the processing and the conditions set by applicable regulations, you may request access to, rectification, erasure, restriction of processing and portability of your personal data, and object to processing based on legitimate interest. Where processing is based on your consent, you may withdraw it for the future.

To exercise your rights concerning data actually held by the publisher, contact privacy@nostatic.app or write to Nicolas HOMS EI at 16 rue Robert Glétron, 53480 Vaiges, France. Additional information may be requested where there are reasonable doubts about your identity; a copy of an identity document is not required as a matter of course. A response will be provided within the statutory period, generally one month, with a possible extension under the conditions set out in the GDPR.

You may lodge a complaint with the CNIL or the competent supervisory authority.

8. Changes to This Policy

This policy will be reviewed when the website, contact arrangements, service providers or processing practices change. The date above identifies the latest update. Where specific information or consent is required, the corresponding steps will be taken.