Privacy
Privacy notice
Last updated:
Who we are
AlphaOscar, 6 rue d'Armaillé, 75017 Paris, France, VAT number FR47910288299, processes your data. Registrar Domains is a service of AlphaOscar. Write to privacy@alphaoscar.fr for any question about your data.
What we collect
- Your account email, and the time of each sign-in.
- The registrant's contact data for each domain: name, company, postal address, phone, email.
- The email you type when you pay, and the payment reference from Stripe. We never see your card number.
- The orders, domains, API keys (only a hash of each key) and connected apps of your account.
- Your IP address, in server logs and in the limits that stop abuse.
Why
- To register and keep your domain, and to send the registrant data the registry requires: the contract with you.
- To send sign-in codes and run your account: the contract with you.
- To keep accounting records of each sale: a legal obligation.
- To stop abuse, spam and fraud: our legitimate interest.
Who receives it
- Openprovider, our accredited registrar, and the registry of the extension: the registrant data, as every registration requires.
- Stripe: the payment.
- Amazon SES, through our mail service: your email address, to send sign-in codes.
- Cloudflare: hosting of this site and its data.
Some of these companies process data outside the European Union, under the European Commission's standard contractual clauses.
How long
- Orders and invoices: 10 years, for French accounting law.
- Sign-in codes: 1 day.
- Sessions: 30 days after the last use, or until you sign out.
- The registrant data at the registry: as long as the domain exists, under the registry's own rules.
Your rights
You can ask to see, correct, delete or export your data, and you can object to a use of it. Write to privacy@alphaoscar.fr. We answer within one month. Data we must keep by law, such as invoices, stays until its period ends. You can also complain to the CNIL, the French data protection authority, at cnil.fr.
Cookies
One cookie keeps you signed in, and a second one tells the pages to show "Dashboard" instead of "Sign in". Both are necessary for the service and need no consent. There is no advertising or tracking cookie.