Privacy policy
Items marked [to be completed] will be filled in before the public launch.
Data controller
The data controller is [to be completed], [to be completed]. Data protection contact: contact@truetake.net.
On this website
- No cookies, no ads. The site’s fonts and scripts are hosted here.
- Audience measurement: an Umami script served from
stats.methodinfo.frcounts page views (page, referring site, browser and device type, country). No cookie and no persistent identifier: you are not tracked across sites. - Server logs: IP address, requested page, date and browser, for security and abuse prevention (legitimate interest). Kept for 7 days.
- Local preferences: if you dismiss the language suggestion, that choice is saved in your browser (local storage). It is never transmitted.
- Pairing page (
/join): the pairing code stays in your browser and is neither sent nor stored by the site.
In the app
The app only processes what is needed to produce a proof. Optional data is collected only after your explicit consent, which you can withdraw at any time.
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Video (segments and final video) | Validate the loop, assemble and certify the video | Performance of the requested service | 14 days after the end of capture |
| Capture metadata (QR codes, timestamps, durations, resolution, codec) | Check order and continuity, forensic analysis | Performance of the requested service | Detailed report: 14 days |
| Approximate location (about 100 m), optional | Proof context | Consent | Traces: 7 days; only a hash stays in the proof |
| Device motion (one average value per segment), optional | Proof context | Consent | Traces: 7 days; only a hash stays in the proof |
| Device model, OS, app version | Capture manifest, compatibility | Performance of the requested service | With the proof |
| Hashes, signed certificate, Merkle path | Allow later verification | Performance of the requested service | 90 days after the end of capture |
| Technical logs (including IP address) | Security, abuse limitation | Legitimate interest | 7 days |
Backups rotate within 30 days at most. A video uploaded for server-side verification is deleted at most 24 hours after receipt.
These are the target retention periods of the beta (retention profile 1); their legal validation is in progress.
People on camera
A video may show other people. Whoever films must inform them and respect their image rights. TrueTake performs no facial recognition and uses videos for nothing but the proof.
Verification and sharing
- The verifier computes everything in your browser: the video and the proof file are not uploaded.
- The optional cross-check with the server sends the proof file and the video hash, never the video itself.
- A share link only exists if you create it. It expires, and you choose whether it includes the video.
- The public ledger only holds Merkle roots: no video, position or identifier.
Recipients and hosting
Data is accessible to the publisher and its host, [to be completed], within the limits of their tasks. It is never sold or used for advertising. Server location: [to be completed].
Security
Encrypted transport (HTTPS), access limited by per-operation tokens, Ed25519 signatures on every proof element, strict security headers and minimal logging.
Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability, and you can withdraw your consent at any time. Write to contact@truetake.net; we answer within one month.
You can also lodge a complaint with the CNIL (French data protection authority) or your local authority.
Deleting a video does not invalidate a proof already signed: the certificate remains verifiable with your original copy.