Privacy policy

In one sentence

The site sets no cookies and its logs keep neither your IP address nor your browser; the app collects nothing: your photos and videos never leave your device.

Data controller

Breizhzion, a public-interest association, 4 rue Isabelle Sadoyan, 69100 Villeurbanne, France. Contact: dev@breizhzion.com.

The website

When you visit this site:

• Your browser sends a request (page address, preferred language, browser type). The preferred language is only used to redirect you to the right version and is not kept.
• Our server logs keep only the date, the requested page and the response code. No IP address, no browser, no referring page. They rotate continuously and are capped at 30 MB in total.
• No cookie is set, no audience measurement or tracking tool is used, and no font or resource is loaded from a third party: fonts come from the association's own CDN (cdn.breizhzion.com).
• Cloudflare, which delivers the site, sees your IP address and request headers in order to route and protect traffic. It also adds audience-measurement and bot-detection tags to our pages: the site's security policy (CSP) forbids your browser from running them, which we checked on 9 October 2026.

Legal basis: legitimate interest (Art. 6(1)(f) GDPR), operating and protecting the site.

The app

The Noppera app is in testing and not published yet. What follows describes how it works, and each point is checked in its code and manifest.

• Your photos and videos never leave the device. They are read, processed and saved on the phone. The app sends no data about you or about your files.
• A single network request: at startup, the app downloads a short announcements file (noppera.breizhzion.com/announcements.json) so it can tell you about important news without waiting for an update. It contains no identifier and nothing about your files. As with any request, this server sees your IP address and device type, but its logs keep no trace of them (see above). Only the list of announcements already read is kept, on your phone. If the file cannot be reached, the app works normally.
• No account, no advertising identifier, no analytics, no crash reports sent to anyone.
• Your files. You pick them with the system picker or the Share menu; the app has no access to the rest of your photo library. A working copy is kept in the app's cache, excluded from backups, and deleted as soon as the masked copy is produced. The masked copy stays in that same cache until you remove the file from the list; it only leaves the app if you save it to your library or as a file. If processing fails, the working copy is kept so you can try again, until you remove the file from the list.
• The job list keeps each file's name, size and status on the device until you remove it. A file name can reveal information: remove entries you no longer need.
• Permissions requested: writing to the photo library, to save the result when you ask; the camera and the microphone, only when you tap “Take a photo or video” (the microphone is only used to record a video's sound). What you capture stays in the app and is never added to your gallery. No location, no contacts.

The app stores (Apple, Google) may process data on their own behalf (download, platform statistics): this policy does not cover them.

Legal basis: not applicable, Breizhzion processes no personal data through the app.

Processors

Breizhzion uses two processors, bound by confidentiality and security obligations under Article 28 GDPR:

• OVH SAS (Roubaix, France): server hosting, datacenter in France.
• Cloudflare, Inc. (San Francisco, USA): proxy and CDN, data in transit only; transfer framed by the standard contractual clauses (Art. 46(2)(c) GDPR).

Your rights

Under the GDPR, you have the following rights:

• Right of access to your data (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure (Art. 17)
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object (Art. 21)

To exercise your rights, write to dev@breizhzion.com. Response time: 30 days maximum. You may also lodge a complaint with the CNIL. Because the site and the app keep no data that identifies you, we may have nothing to give you.