On this page 10 sections
Data controller
Tenworld Network, 8 bis rue Madame de Récamier, 37700 La Ville-aux-Dames, France, publisher of DebridTap (see the legal notice), is the controller of your data. It is used to run DebridTap (debridtap.com) and is not used for any other service of the company without your consent, apart from the fraud signals described under "Recipients". For any question about your data: [email protected].
Data we collect
Account: email address, password stored in hashed form, chosen language and theme.
Usage: submitted links, produced links, file sizes, downloaded volume, date and IP address of each request.
Credits and payments: packs purchased, amounts, dates, transaction reference at our payment provider. Your card details are entered with that provider and never reach us.
Security: IP address, browser, and a technical browser fingerprint computed at sign-up and login to detect fraud and multiple accounts; it is stored in hashed form.
Help: the messages you send us.
Purposes
We use this data to provide the service and keep your credit balance (performance of the contract), keep our accounts (legal obligation), protect the service against fraud and abuse, and improve it from internal statistics (legitimate interest).
Retention
Each kind of data is erased once its set period is over:
Account: for as long as it stays open. Once it is deleted, the email address, the account identifier and the IP address used at sign-up stay for 12 months in a register used to spot fraud, then are erased.
Login records (IP address, browser, date and time of each login): one year, even if the account is deleted in the meantime, since French law obliges us to hold them that long.
Link history: 12 months. After that it is anonymised, leaving only statistics that carry no link, no file name and no IP address.
Browser fingerprint: 90 rolling days.
Accounting records of your purchases: ten years, the period set by the French Commercial Code.
Content reports: one year after they are dealt with.
Statutory retention and court orders
We hold the login records in order to answer the judicial authorities when they demand them. Nobody else receives them, and those authorities only in the course of legal proceedings.
Protected content
Do you hold rights in a work that can be reached through DebridTap? The Report content page, linked at the bottom of every page, explains what to send us.
Recipients
Your data is never sold or rented. It is processed by our technical providers, within the limits of their task: site hosting (see the legal notice), email delivery, payment, site delivery and protection. The host of the file you request receives the submitted link. Authorities may receive data where the law requires it.
Tenworld Network shares a few signals between its services, for the sole purpose of stopping fraud and abuse: the IP address used to create an account, the blocking of an account or an email address for fraud, and the email address of its customers, so that none of its other services sends them marketing. These signals are only used to turn down an abusive sign-up or access, or to leave an address out of a mailing.
If a provider processes data outside the European Union, the transfer is covered by the safeguards set out in the GDPR.
Cookies
The site only sets the cookies it needs: your login session, your chosen language, and a visit cookie named dt_visit. That last one holds a random identifier, lasts 30 minutes and only lets us count visits, with statistics computed on our own servers. Your theme is remembered in your browser. No advertising cookie, no third-party analytics tool.
Your rights
You can access, correct and erase your data, request its portability, object to its processing or ask for it to be restricted. Write to us from the Help page or at [email protected]. You can also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).
Updates
This policy may change; any significant change is announced to you by email.