Space Citizen

Privacy policy

Space Citizen collects the minimum data needed for what you come here to do: apply to the Club, receive its updates, present a project, or write to us from the member area. This page describes exactly what is collected, why, for how long, and who else has access to it.

Data controller

The data controller is Nicolas Humeau, publisher of the site. Contact details are provided in the legal notice.

Why we collect this data

Each purpose below corresponds to processing that is actually in place. There are no others: no data is collected “just in case”, sold on, or used for advertising.

Reviewing your application to the Club

When you apply, we open a draft with your email address. After the two required sections and your final submission, we review your application, contact you about it and, if accepted, give you access to the member area.

Data collected. Email address, then, in the two required sections: first name, last name, country of residence, role, sector, LinkedIn profile if provided, intended ticket range, motivation, areas of interest, ways you wish to contribute, and a free-text field. We also record your separate choice about receiving Club news, the page language and, where applicable, the referral parameters of the link you followed.

Legal basis. The performance of pre-contractual measures taken at your request: your application seeks membership of the Club, which is governed by the conditions of membership accessible from this page.

Sending you Club updates

Signing up for Club updates is separate from the application: it is requested explicitly, never through a pre-ticked box, and confirmed via a link sent to your address. Every mailing includes a one-click unsubscribe link.

Data collected. Email address, page language, date and version of the text you consented to, dates of confirmation and unsubscription.

Legal basis. Your consent, collected through a dedicated step and withdrawable at any time.

Reviewing a startup project

If you present a project to us, we keep what you send in order to review it and reply to you. The document you submit remains confidential: it is not published, circulated, or passed on to third parties.

Data collected. Project name, contact email address, website if you provide one, your message, the page language and the PDF document you submit.

Legal basis. Our legitimate interest in reviewing the projects sent to us. You may object at any time: we stop the review and delete your file.

Receiving your messages from the member area

The “An idea for the Club?” block sends us your message so that we can follow up on it. It is recorded with your member number, never with your address, and is neither published nor shared outside the team.

Data collected. Member number, type of message (an idea, an offer to help, other) and the text you write.

Legal basis. The performance of your Club membership contract, including these exchanges.

Understanding how the site is used

We measure the site's audience to know which pages are read and which journeys are completed. Neither your name nor your address is transmitted: the events tracked are a closed list, page addresses are stripped of their parameters, and the content you type is never captured. The member area is entirely excluded from fine-grained measurement. This data nonetheless remains yours: your browser receives a technical identifier that persists from one visit to the next, and which is enough to link your visits together. It is a pseudonym, not anonymity.

The country you are connecting from is determined from your IP address, which is not retained: only the country is recorded with the event, never the city, postcode or precise location.

Data collected. Pages viewed, usage events from a closed list, technical identifier assigned to your browser, and, only if you have accepted it, a session recording in which all inputs are masked.

Legal basis. Our legitimate interest in measuring how the site is used, under the conditions described in the Trackers section.

Protecting the site from abuse

To prevent a bot or a third party from flooding the forms or bombarding a mailbox, we count recent requests. These counters contain only timestamps; nothing about who you are goes into them, no IP address, no browser header. When a cap protects a specific address, the counter carries a fingerprint of that address, never the address itself.

Data collected. Timestamps of recent requests, and a fingerprint of the address or link concerned for targeted caps.

Legal basis. Our legitimate interest in preserving the availability of the service and preventing abusive use.

How long we keep it

The table below lists every place your data may be held and the period that applies to it. Where a retention period is automatic, the system enforces it itself, without intervention.

Club application (draft and final submission)
not accepted or left without follow-up: 24 months after the last interaction, then automatic deletion · accepted: added to the member file, kept for the duration of membership, then 5 years in restricted-access archive (evidence)
Sign-up for Club updates
as long as it is active, then removal from the list and retention of proof of consent and withdrawal only, for 5 years
Startup project submission
24 months
PDF deck of a startup project
24 months
Deck uploaded but never finalised
7 days
Single-use submission marker
final marker: 24 months · submission being finalised: until the submission is linked
Message from a member (“An idea for the Club?”)
24 months after they are processed
Club membership and member number
duration of membership, then a 5-year archive period
Access tokens (personal links and sessions)
link to resume an application: 30 days · immediate continuation after step 1: 24 hours · newsletter sign-up confirmation: 7 days · one-click unsubscribe: 24 months · member area login link: 24 hours · member area session: 2 hours
Transactional email queue
7 days
Email captures (non-production)
7 days
Application review sheet
no automatic purge, the row is kept alongside the application and removed manually
Local mirror of the review sheet (non-production)
7 days
Abuse prevention counters
70 minutes (one-hour sliding window, plus a margin)
Contact at the email delivery provider
no automatic purge, the contact is erased on request
Delivery logs and email previews (processor)
retention period configured in the processor's settings, logs for an address deleted on request
Audience measurement
browser identifier: 13 months · raw data: 25 months at most, retention setting of the measurement project
Proof of consents and withdrawals (trackers)
60 months
Platform technical logs
platform default retention period

Who else has access

Your data is neither sold, nor exchanged, nor passed on to advertisers. It is processed by the Space Citizen team and by the following technical providers, each within the scope of its own role.

Where your data is processed

Each processing operation has its own location. We list them separately rather than as a whole: they are not all identical.

Our providers are contracted through their European entities and the data is hosted in the Union. Occasional access from third countries may nevertheless occur (technical support, sub-processors): it is governed by the European Commission's standard contractual clauses built into these providers' contracts and, where applicable, by their certification under the Data Privacy Framework.

Your rights

You can request access to your data and obtain a copy, have anything inaccurate corrected, request its erasure, or ask us to restrict its use. You can also withdraw your subscription to Club updates at any time, via the link in each mailing.

To exercise these rights, write to us at the contact address. We reply within one month. If serious doubt remains about the identity of the person making the request, we may ask for something that allows us to verify it, and nothing more.

Your data export is provided to you in a readable format, together with a summary. Erasure covers every location listed above, including any document you may have submitted, the row in the review sheet and the traces left with our email delivery provider.

There is one exception, and we would rather spell it out: audience measurement data is tied to your browser's technical identifier, and we keep no link between that identifier and your address. We therefore cannot find it from your request. If you wish to exercise your rights over it, send us that identifier, it is in your browser's local storage, under a key named after the measurement tool, and we will process that profile. You can also simply clear your browser's site data.

The right to object applies to processing based on our legitimate interest: the review of a startup project, the abuse-prevention counters and audience measurement. It does not apply to your application or to exchanges in the member area, which rest on the membership contract: you can, however, end your membership at any time, which brings that processing to an end. You can always unsubscribe from Club updates, in one click, from each mailing.

For these processing operations, you can also receive your data in a structured, commonly used format.

Complaints

If our reply does not satisfy you, you can lodge a complaint with the French supervisory authority, the Commission nationale de l'informatique et des libertés (CNIL); how to do so is explained on its website.

Trackers and audience measurement

The site uses no advertising cookies and shares no data with ad networks. Several mechanisms may store or read information in your browser. They are described below, with their purpose and their applicable regime.

Audience measurement, first, which runs without consent when the estimated country of access is France, because it stays within the strict limits of the exemption provided for by the regulations: a closed list of events, anonymous statistics produced for our exclusive use, no cross-referencing with other processing, no use of the data by third parties for their own purposes, no tracking of your browsing on other sites. Your browser receives a technical identifier specific to this site, valid for at most thirteen months with no automatic extension; raw data is kept for at most twenty-five months. This is a pseudonym, not anonymity: the “Your rights” section explains how to exercise them over this profile.

The country of access is estimated once per browsing session and is not stored. Only the regime selected is kept in your browser for as long as the tab is open. This estimate serves solely to select the applicable regime: when the estimated country is France, audience measurement runs under the exemption conditions above; in every other case, or when the country cannot be estimated, audience measurement and session recording remain inactive until you have made a choice.

Session recording, next, which runs only if you have accepted it via the choice banner: it replays your browsing path across the public pages, with all your inputs kept masked, and comes with a detailed capture of interactions. It never activates before your choice, never after a refusal, and never in the member area, which is excluded from any fine-grained measurement. Your choice, acceptance or refusal, is kept for six months; you can change it at any time via “Manage trackers” in the footer, and withdrawing it stops the recording immediately.

There are also two purely functional mechanisms: the member area keeps your session token for as long as the tab is open, and the application page retains what is needed to resume your entry.

The emails we send contain an open pixel placed by our email delivery provider, configured in anonymous mode: it gives us no individual statistics and serves only to ensure messages are delivered properly.

Write to us

For any question about this policy or your data, one address:

contact@spacecitizen.eu

Updates

This policy may change, in particular following its legal review. The version published on this page is the version in force.

Legal notice →