Privacy policy

The data controller is SeriousDev, 31000 TOULOUSE, publisher of the site https://librehub.store.

Contact for any question about your data: hcombey@gmail.com.

Nothing is collected until you create an account or send a form. Browsing the catalog and listings requires no data.

Account

Name, email address, password and role. The password is stored as a bcrypt hash: it is neither kept nor recoverable in clear text, including by us. Signing in with Google also provides your name and profile picture, sent by Google.

Developer account

In addition: the date and version of the charter you signed.

Reviews

Your rating, your comment and your account's display name. A review is public: anyone can read it, without an account.

Ideas and votes

The text of the idea and the display name. Your votes are recorded so that one account votes only once; only their total is shown.

Submitted applications

The listing, its regeneration prompt, the uploaded images and the test account provided. The test account is never public: only its author and the administrators can see it.

Quote request

Company name, contact name and details, company size, software replaced, stated budget and project description. Only administrators read these requests.

E-mails

Your address is used to write to you about what you do on the site, and only that: sign-up confirmation, updates on your listings (review, publication, review received), on the ideas you suggested and on your quote requests. No newsletter and no marketing. Administrators receive alerts containing no data about you: the details are read in the administration area.

Application opens

A per-application counter goes up when someone opens it. That counter is a total: we do not record who opened what.

No analytics, no ad tracker, no embedded social network. Your data is never sold, rented or passed to third parties for commercial purposes.

A single cookie is set, and only if you sign in: your session cookie, which keeps you signed in. It is required for the site to work and is used for no tracking. No consent banner is therefore shown — there is nothing to consent to.

Your browser also keeps, locally, the list of applications you have opened. It is only used to mention support once you use several applications. This list never leaves your device and is not sent to us. Clearing the site's data deletes it.

If you start suggesting an idea without being signed in, what you type is kept in the tab while you sign in, so you don't have to type it again. It is deleted when published or when the tab is closed.

The catalog shows each application's thumbnail. When its author has not uploaded one, it is loaded from the application's own site: your browser then contacts that site directly, which may keep a trace of it in its logs (IP address, referring page). We receive nothing from that exchange.

Opening an application takes you to a site we do not publish. Data you leave there falls under that application's privacy policy, not this one.

Donations are made with our payment provider, on its own site. No banking data passes through LibreHub and we store none.

Contract

Your account, your submissions and your reviews, and the emails telling you about them: without this data, the requested service cannot be provided.

Legitimate interest

Reviewing listings before publication, moderating reviews, counting total opens, handling quote requests.

Legal obligation

Keeping certain data when a law requires it.

Your account and everything attached to it are kept as long as it exists. When it is deleted, the account and its reviews are erased.

A published application listing stays online for as long as it is published: it describes software, not a person. Its author can ask for it to be removed.

Quote requests are kept for three years after the last contact, the usual period for business prospecting.

Data is stored in a MongoDB database on a server we administer, located in the European Union. It is not transferred outside the Union, except for Google authentication if you choose that sign-in method.

Emails are delivered by Brevo (Sendinblue SAS), a provider established in France, acting as processor: it receives your address, your name and the message content, solely to send it. It does not use them on its own behalf.

You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to withdraw your consent at any time.

You exercise these rights by writing to hcombey@gmail.com. We reply within one month. You can also remove a review you posted yourself, from the listing concerned.

If the answer does not satisfy you, you can lodge a complaint with the French data protection authority, CNIL.

This document may change with the site. The last update date appears at the top of the page; a substantive change will be notified to account holders.