Privacy Policy – GDPR

Service: Handtrainer

Last updated: 11/03/2026

1. Data Controller

The data controller is:

Marine Desgrolard

Sole trader – Micro-enterprise

3 rue de Périgueux – 33700 Mérignac – France

Email:

2. Data Collected

When using the website and application, we may collect:

Personal data:

• first name and last name
• email address
• password / login credentials
• account-related information (subscription, preferences)
• billing information for paid subscriptions

Usage data:

• actions on the platform (exercises viewed, videos watched, tools used)
• technical logs (IP address, browser, device, date and time of connection)

Voluntarily provided data:

• messages sent via the contact form
• participation in surveys or comments

3. Purposes of Processing

Data is used for:

• managing user accounts and subscriptions
• providing access to platform features
• communicating with users (informational emails, updates, newsletter if opted in)
• billing and accounting management
• improving the service and user experience
• fraud prevention and account sharing control

4. Legal Basis for Processing

Data processing is based on:

• contract performance (subscription)
• user consent for newsletter or certain analytics
• legitimate interest for security and fraud prevention

5. Data Recipients

Data may be shared with:

• the publisher of the site (Handtrainer)
• technical service providers (hosting, payment, emailing)
• legal authorities when required by law

Technical sub-processors:

| Provider | Role | Country | |---|---|---| | Hostinger International Ltd | Backend hosting | Cyprus (EU) | | Vercel Inc. | Frontend hosting (app.handtrainer.fr) | United States | | Google LLC | Contextual / personalised advertising (AdSense) | United States |

Transfers outside the EU (Vercel, Google) are governed by Standard Contractual Clauses (SCCs) in accordance with the GDPR.

Service providers respect confidentiality and process data solely on behalf of the publisher.

6. Retention Period

User account data is retained for as long as the account is active. Billing data is retained for 10 years in accordance with legal obligations. Anonymised data may be used for statistical or service improvement purposes.

7. Cookies and Trackers

The site uses the following cookies:

Essential cookies (no consent required):

• is_authenticated – used to maintain your session after login
• access_token – used to authenticate your requests to the API

These cookies are strictly necessary for the service to function and cannot be refused.

Advertising cookies – Google AdSense (consent required):

The site uses Google AdSense to display advertisements. We use Google Consent Mode v2, which adapts AdSense behaviour based on your choice:

• Without consent (refused or no response): only contextual, non-personalised ads are shown. No third-party advertising cookies are placed on your device.
• With consent (accepted): personalised ads may be displayed. Google may then set cookies for advertising targeting and performance measurement.

Your choice is stored locally in your browser under the key ht_cookie_consent. It is valid for 13 months, after which you will be asked again. You can change your preference at any time via the "Manage cookies" link at the bottom of any page.

For more information: Google Privacy Policy.

Audience measurement – Vercel Analytics & Speed Insights:

The site uses Vercel Analytics and Vercel Speed Insights to measure performance and traffic. These tools do not set cookies and do not collect personally identifiable data. Data is anonymised and aggregated. No consent is required.

For more information: Vercel Privacy Policy.

Third-party content: The site may embed videos from YouTube or Instagram. These platforms may set their own cookies when content is played. You can manage these through your browser settings.

8. Content Sharing and Third Parties

Some videos or illustrations come from third-party platforms (YouTube, Instagram).

Videos are integrated via links or embeds. Data generated (e.g. viewing activity) may be collected by the third-party platform. Handtrainer claims no rights over this content and does not share personal data with these platforms except with consent or for functional use of the service.

9. Data Security

Handtrainer implements technical and organisational measures to protect data:

• secure storage on servers hosted by Hostinger
• encryption of passwords and sensitive information
• strict access control for internal data

10. User Rights

In accordance with the GDPR, each user has the right to:

• access their data
• rectification
• erasure
• restriction of processing
• objection to processing
• data portability

Requests can be sent to:

We will respond to any request within one month of receipt, as required by the GDPR.

11. Withdrawal of Consent

Where processing is based on consent (newsletter, analytics, cookies), the user may withdraw their consent at any time without affecting the lawfulness of prior processing.

12. Complaints

If you have a complaint regarding the processing of your data, you may contact:

• the data controller ()
• or the CNIL (French Data Protection Authority) at www.cnil.fr
• or your local data protection authority if you reside outside France