La Convoc is published by UNCERT Games Sàrl, 2 avenue Léonard-Sismondi, 1224 Chêne-Bougeries, Geneva, Switzerland (IDE CHE-386.709.973), acting as data controller. Contact: [email protected].
This policy applies to the site laconvoc.com. We apply the Swiss Federal Act on Data Protection (revFADP) and, for people located in the European Union, the General Data Protection Regulation (GDPR).
The export file of your conversation is parsed locally, in your browser. The raw file is sent to no server and we keep no copy of it. From that local analysis, your browser transmits only a "file" made of derived data, described below.
Your account: your e-mail address, used for signing in (one time code), delivering the ceremony and following up on your support requests.
The file: per member statistics (names as they appear in the export, message counts, response times, follow ups and so on), a limited selection of conversation excerpts, the group name, the display first names and genders you choose, and the free text description you write. Before transmission, your browser replaces phone numbers, e-mail addresses and links found in the excerpts with "[removed]", and sets aside excerpts touching on certain sensitive subjects (health, bereavement and similar). This filtering is automatic and cannot be perfect.
The ceremony: the generated cards (titles, verdict texts, first names, selected quotes), accessible through a private link.
Payment: processed by Stripe. We never see or store your card number; we keep the transaction reference and the amount.
Support: the content of the tickets you open from your dressing room, with your e-mail address.
Technical data: anti abuse counters (rate limits) based on a cryptographic hash of your IP address or e-mail address: we do not log your IP address in clear text. Our host Cloudflare processes the connection data inherent to serving the site.
The file also stores your selected treatment (original, No Mercy or Guest of Honour), the participant to celebrate and, for No Mercy, your confirmation that the participants are adults and have agreed. The Duo format uses a selection of consecutive exchanges to understand their context; these excerpts are cleaned before being sent to our AI provider, like the other material in your file.
Performance of the contract: generating your ceremony, managing your account, delivering the link, enabling upgrades. Legitimate interest: security, prevention of abuse and fraud, aggregated operational monitoring, technical alerts. Legal obligation: retention of accounting records relating to payments.
We do not use your data for advertising or commercial profiling, and we do not sell it to anyone.
| Data | Period |
|---|---|
| Raw conversation export | Never transmitted, never stored on our servers |
| File (statistics and excerpts) | Deleted automatically 180 days after the last generation (kept to allow upgrades); destroyable at any time from your dressing room |
| Ceremony and its link | 30 days, then automatic expiry |
| Account (e-mail) | Until you delete your account, self service from your dressing room |
| Support tickets | 180 days after the last exchange |
| Aggregated operational counters | 90 days (no conversation content) |
| Payment incident logs and discount code usage records | As long as needed to handle incidents and prevent fraud |
| Payment records (held by Stripe) | Applicable statutory accounting periods |
We share data only with the providers necessary to run the service:
Anthropic (United States), AI writing of the ceremonies: receives the statistics, cleaned excerpts, first names and context of the file through its API. This content is not used to train its models. Stripe (United States / Ireland), payment: receives your e-mail address and the amount; the conversation content is never sent to it. Resend (United States), transactional e-mail delivery (sign in code, ceremony link, support replies). Cloudflare (United States), site hosting and data storage (encrypted at rest).
Transfers outside Switzerland and the EU rely on appropriate safeguards (standard contractual clauses and, where applicable, Data Privacy Framework certification).
You are the one submitting the export: make sure you are entitled to do so and that you inform the members of the group. The ceremony is made to be shared with them, not to expose them without their knowledge. Any member of a group processed by La Convoc can ask us to delete the data concerning them by writing to [email protected].
You have the rights of access, rectification, erasure, restriction, objection and portability over your data, as well as the right to withdraw your consent. From your dressing room, you can destroy your files, your ceremonies and your account yourself. Some limited traces (support tickets, payment logs and anti fraud records) may be kept after account deletion, for the periods indicated above.
To exercise a right: [email protected]. You may also lodge a complaint with a supervisory authority: the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland, the CNIL in France, or the authority of your country of residence.
The site sets a single, strictly necessary cookie: __Host-lj_sess, which keeps your session alive for 30 days (HttpOnly, Secure). No advertising cookies, no third party analytics, no tracking pixels. That is why you see no cookie banner: there is nothing to consent to.
The site is served over HTTPS only. Signing in uses a one time code sent by e-mail (no stored password). Sign in codes are kept in hashed form only, session identifiers are random, and data is encrypted at rest at our host. As no system is infallible, we will inform you in accordance with the law in case of an incident affecting your data.
La Convoc is not intended for people under 16.
We may update this policy; the date at the top of the page is authoritative. In case of a substantial change, we will inform you through the site or by e-mail.
This page is an English translation provided for convenience. The French version is the binding text.