隐私政策
最后更新：2026年10月11日
译文仅供参考：仅以法语版本为准。 Version française
This policy explains what data ShortsReady processes, why, for how long, and how to exercise your rights, in accordance with the General Data Protection Regulation (GDPR).
Data controller
The publisher of the website (see the legal notice), reachable at team@shortsready.com.
Data processed and purposes
| Data | Why | Legal basis | Retention period |
|---|---|---|---|
| Email address | Create and secure your account, send you verification and sign-in codes | Performance of the contract | Until the account is deleted, or 3 years without sign-in |
| Password (Argon2id hash, never the password itself), authenticator app secret (encrypted), backup codes (hashes), trusted devices (browser, system, IP address, dates) | Secure access to your account (two-factor authentication) | Performance of the contract | Until the account is deleted; trusted devices: 30 days |
| Linked external account (Google, Apple, Microsoft, Facebook or LinkedIn): identifier and email address | Sign you in with that account, if you chose to | Performance of the contract | Until the account is unlinked or deleted |
| Uploaded videos (image and voice) and transcripts | Provide the service: subtitles, audio, zooms, export | Performance of the contract | 48 hours after the last change (free plan), 30 days (Premium); deleted with the account |
| Usage (number and length of uploaded videos) | Apply the limits of your plan | Performance of the contract | Until the account is deleted |
| IP address, technical logs, usage steps (sign-up, upload, export) | Security, abuse prevention, service improvement | Legitimate interest | 12 months at most |
| Payment data | Collect the subscription | Performance of the contract | Processed by Stripe; we never see your card. Invoices: 10 years (legal obligation) |
| Email preference | Send you news and offers if you agreed | Consent | Until you withdraw your consent, in one click from your account |
| Tips and reminders related to your usage (first video, quota, video about to be deleted) | Help you use the service you chose | Legitimate interest | Unsubscribe in one click from each email or from your account |
| Public website page views (page address, referring site, anonymous daily fingerprint) | Measure website traffic, without cookies or third-party services | Legitimate interest | 13 months; the fingerprint changes every day and cannot recognise you from one day to the next |
Your videos are never used to train artificial intelligence, sold or shared. Transcription runs on our own servers, without any third-party service.
Recipients and processors
- OVH: hosting of the website, videos and database, on servers located in Canada. Canada benefits from an adequacy decision of the European Commission.
- Google, Apple, Microsoft, Meta (Facebook), LinkedIn: only if you choose to sign in with one of these accounts; the provider sends us an identifier and your email address, nothing else. These companies may process data in the United States, under the EU–US Data Privacy Framework.
- Stripe: online payment. Data may be transferred to the United States, under the European Commission's standard contractual clauses.
Emails (verification codes, password resets) are sent from our own servers.
Cookies
The website only uses essential cookies: srSession, which keeps you signed in for 30 days,
srDevice, which remembers a trusted device for 30 days, srPending, srOauth,
srTotp and srFlash, which last a few minutes during a sign-in or a settings change,
srNext, which takes you back to the plans after signing in (one hour at most), srRef, which
remembers the referral link you followed for 30 days, and srLang, which remembers the language you chose
for one year. No advertising or analytics cookie is set: traffic is measured without cookies, on our servers.
No consent is therefore requested.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data. From your account, you can download your data and delete your account at any time, which permanently erases your projects and videos. For any other request: team@shortsready.com.
You may also lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr), or with the authority of your country.
Security
Encrypted connections (HTTPS), passwords stored as hashes (Argon2id), two-factor authentication on every new device (email code or authenticator app), rate-limited attempts, restricted server access, database backups, automatic deletion of videos.