Privacy notice

wallabag.it is a read-it-later service that lets you save web pages, URLs, articles, tags, annotations and reading preferences.

This notice explains how personal data is processed for the wallabag.it website and hosted wallabag.it service.

Data controller

The data controller is Nicolas Lœuillet, sole proprietor (entrepreneur individuel, EI) and publisher of wallabag.it.

Contact: nicolas@wallabag.it

Address:

wallabag.it
chez Nicolas Lœuillet
30 bis rue des sapins
62720 Rinxent
France

Data we process

Depending on how you use the service, wallabag.it may process the following categories of data:

• account data: email address, hashed password, account preferences;
• content data: saved URLs, titles, extracted article contents, tags, annotations, favourites, read/unread status, creation and update dates, public sharing links;
• save by email: emails sent to your private saving address (sender address, subject, content and links);
• RSS and Atom feeds: addresses of the websites and feeds you follow;
• import and export data: files or data submitted when you import or export your articles;
• subscription data: selected plan, payment status, invoices, transaction references;
• support exchanges: messages sent to support, email address, information needed to handle the request;
• technical data: IP address, user-agent, technical logs, security events;
• website analytics data and service usage statistics (Matomo);
• content notices: identity and email of the person sending the notice, reported content, exchanges and decision.

wallabag.it does not collect full payment card details. Payments are processed directly by payment providers.

Purposes, legal bases and retention periods

Access to saved URLs and article contents

Saved URLs, article titles, article contents, tags and annotations in wallabag.it are private.

wallabag.it does not read, sell or use this content for advertising, commercial or editorial purposes.

Limited technical access may nevertheless occur when necessary:

• to maintain the service;
• to fix a technical incident;
• to respond to a support request;
• to ensure service security;
• to comply with a legal obligation.

Such access is restricted to authorized persons, limited to what is strictly necessary for the relevant intervention, and subject to a confidentiality obligation.

Account deletion and backups

You can delete your account from the Config page of your account, or request its deletion by writing to nicolas@wallabag.it.

After account deletion, active data associated with the account is deleted within a maximum of 30 days, unless a legal retention obligation applies or temporary retention is necessary for service security.

Data may remain temporarily present in technical backups for up to 90 days before automatic overwrite.

Backups are used only to restore the service in the event of a technical or security incident.

Data export

You can export your articles and data from wallabag.it in the formats provided by the service, including PDF, ePUB, mobi, JSON, CSV, txt or HTML.

Subprocessors and providers

wallabag.it uses technical providers that are strictly necessary for operating the service.

These providers process data only for the purposes required by their role. Where transfers outside the European Union are necessary, they must be covered by appropriate safeguards in accordance with the GDPR.

Cookies and trackers

The app.wallabag.it service only uses cookies needed for it to work, which do not require consent: a session cookie (login), a “Remember me” cookie (up to 12 months, only if you tick the box when logging in) and a theme preference cookie (light or dark).

The wallabag.it website uses Matomo, self-hosted, to measure its audience. Matomo is configured to be exempt from consent according to the CNIL recommendations: truncated IP address, data only used for anonymous statistics about the website, no combination with other processing and no transfer to third parties. It sets the _pk_id (13 months) and _pk_ses (30 minutes) cookies.

You can object to this audience measurement:

The app.wallabag.it service does not set any audience measurement cookie. Its usage statistics are computed by Matomo from the server logs, with IP addresses truncated before analysis and without feed addresses, tokens or searches. To object, write to nicolas@wallabag.it.

The support chat of the website (Zammad) stores the conversation identifier in your browser for the session, only if you open it.

Recipients

Data is intended for wallabag.it and for the providers required for hosting, payment, support, security, accounting and service communications.

Data is not sold to third parties.

Your rights

Under the conditions provided by the GDPR, you have the following rights:

• right of access;
• right to rectification;
• right to erasure;
• right to restriction of processing;
• right to object, where processing is based on legitimate interest;
• right to data portability, where processing is based on contract or consent;
• right to withdraw consent at any time, where processing is based on consent;
• right to set guidelines for what happens to your data after your death.

To exercise your rights, contact nicolas@wallabag.it.

You may also lodge a complaint with the CNIL: https://www.cnil.fr.

Mandatory data

Data required for account creation, service provision, payment and invoicing is mandatory in order to use wallabag.it.

Data related to the newsletter or to optional communications is optional.

Automated decision-making

wallabag.it does not make decisions producing legal effects concerning you solely on the basis of automated processing.

Changes to this notice

This notice may be updated to reflect changes to the service, tools used or applicable regulations.