Holo

Privacy policy

What Holo stores, what it never stores, how long it keeps it, who it is shared with, and the rights you hold over it.

Last updated

Data controller

The data controller is Justin Deboves, entrepreneur individuel (EI), trading as Aloha Pixel, 6 rue des Métairies, porte 002, 64230 Poey-de-Lescar, France. For any question about this policy or to exercise your rights, write to contact@alohapixel.com or call 09 85 03 43 20.

What we collect

Three things, and only three. Your email address, given when you create an account. The sites you declare, meaning their domain and the public URLs listed in their sitemap. The measurements we take: load time before preheating, load time after, HTTP status, and the date of the run. For a paid plan, our payment provider also holds the billing details you give it.

What we never collect

We never store the content of your pages: no HTML, no text, no images, no personal data belonging to your own visitors. We hold no access to your server, your admin or your database, and we ask for none. We do not use your data to train models and we sell nothing to anyone.

Why we process it

Your email address identifies your account and carries the sign-in link, service notices and, if you have subscribed to it, the newsletter. The declared sites and their measurements are the service itself: without them there is nothing to preheat and nothing to prove. Billing data exists to issue an invoice, which the law requires us to do.

How long we keep it

Account data lives as long as your account does, and is deleted within thirty days of its closure. Measurements are kept for the history window of your plan, then deleted. Invoices and accounting records are kept for ten years, as required by French commercial law. Newsletter subscriptions are kept until you unsubscribe.

Who we share it with

Only the processors needed to run the service, each bound by a data processing agreement: Cloudflare, Inc. for hosting and network, our payment provider for cards and invoices, and our email provider for sign-in links and service messages. With your consent only, the audience measurement and advertising tools of the purposes you accept in the cookie bar, loaded through Cloudflare Zaraz. Nothing else, and never for money. We disclose data to an authority only where a legal obligation requires it.

Where it is processed

The service is hosted on a network of European points of presence. Some of our processors are established in the United States and may process data there under the safeguards provided by European law, including standard contractual clauses. The list of processors and their locations is available on request.

Cookies

When you first visit, a bar at the bottom of the page asks for your choice, with Accept all and Reject all side by side and a Customise button for each purpose: audience measurement (page views and traffic sources) and advertising and social media. Nothing in those two purposes loads until you have chosen, and refusing costs you nothing. The bar is run by Cloudflare Zaraz, which remembers your choice in the zaraz-consent cookie; a second cookie, ap-cookies-choix, keeps its date: your choice lasts 182 days (about six months), then the bar asks again. You can change it at any time with the Manage my cookies link at the bottom of every page. Beyond that, only strictly necessary cookies are set: the holo_locale cookie remembers the language you chose, and once signed in a technical cookie keeps your session open. Neither follows you anywhere else. Finally, we measure audience with Cloudflare Web Analytics, with no cookie and no tracking: it counts page views anonymously, keeps no personal data, and is therefore exempt from consent as audience measurement.

Security

Traffic is encrypted in transit. Sign-in uses one-time links rather than passwords, so there is no password of yours for anyone to steal from us. Access to production data is limited to the publisher. Any personal data breach likely to create a risk for you is notified to the supervisory authority within seventy-two hours and to you where the law requires it.

Your rights

You have the right to access, rectify, erase, restrict and port your data, and to object to a processing based on our legitimate interest. Write to contact@alohapixel.com: we answer within one month. If our answer does not satisfy you, you may lodge a complaint with the Commission nationale de l'informatique et des libertés, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.

A question about this document? Write to contact@alohapixel.com or call us: a human answers within one business day.