Privacy policy
Last updated September 20, 2026.
This translation is provided for convenience. For consumers in France, the French version prevails.
Data controller
- Company: Ghota Tech Solutions
- Legal form: EURL
- Share capital: 1 000 €
- Registered office: 268 rue Paul Bert, 69003 Lyon, France
- Registration: RCS Lyon 988 597 209, SIRET 988 597 209 00010
- EU VAT number: FR52988597209
- Publication director: Mickaël Villers
- Contact: contact@ghotatechsolutions.com
What we process, why, and for how long
| Data | Purpose | Legal basis | Kept |
|---|---|---|---|
| Email address, handle, time zone, account creation date | Signing you in and running your account | Contract | While the account exists, deleted within 30 days of closing it |
| Your wall: title, bio, tiles, theme, what you type in tiles | Showing your wall, lock screen and share card | Contract | While the account exists |
| Connection credentials (API keys, tokens), encrypted with AES-256-GCM | Reading the values on your tiles from the services you connect | Contract | Until you remove the connection or close the account |
| Values read from those services, and one reading a day per number | Displaying values quickly and drawing history charts | Contract | Latest values while in use; daily readings 400 days |
| Plan, Stripe customer and subscription identifiers, acceptance of the terms at checkout; invoices and payment data are held by Stripe | Selling and managing plans, invoicing, proving consent | Contract; legal obligation for accounting records | Accounting records 10 years (French Commercial Code, L123-22); the rest while the account exists |
| Wall reports: the reason given and, if you leave one, a contact | Moderating walls and answering the reporter | Legitimate interest and legal obligations of a host | 1 year |
| Technical logs: IP address, browser, pages requested, errors | Security, abuse prevention, fixing faults | Legitimate interest | 30 days |
No data is sold, rented or used for advertising. No profiling, no automated decisions.
What is public
A published wall, and the tiles marked public, can be seen by anyone, indexed by search engines and copied into share cards; a listed wall also appears in the directory. Private tiles, your credentials and your email address are never published. The lock screen link is secret and can be renewed from the editor.
Recipients
Data is processed by Ghota Tech Solutions and by its processors, bound by contract and by the GDPR:
- Google Cloud (Google Ireland Limited), Gordon House, Barrow Street, Dublin 4, Ireland: Hosting and database, region europe-west1 (Belgium).
- Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland: Payments, invoices and tax calculation.
- Google Workspace (Google Ireland Limited), Gordon House, Barrow Street, Dublin 4, Ireland: Sending sign-in emails.
Services you connect (GitHub, Stripe, and so on) receive the requests made with your credentials, at your request; their own privacy policies cover what they hold.
Transfers outside the European Union
Data is stored in the European Union (Belgium). Stripe and Google may process part of it in the United States, under the European Commission's adequacy decision for the EU-US Data Privacy Framework and standard contractual clauses.
Cookies and local storage
Flexwall uses a single cookie, fw_session, strictly necessary to keep you signed in (30 days), and the browser's session storage to remember a handle typed before signing in. No analytics, advertising or third-party cookies, so no consent is asked.
Anonymous page-view counters measure visits to public pages and the official wall. Totals are public. The counter stores no IP address, cookies or persistent visitor identifier. A bounded set of random event receipts prevent duplicate requests; these do not identify a visitor. Do Not Track and Global Privacy Control are respected.
Security
Encrypted connections (HTTPS), connection credentials encrypted at rest with AES-256-GCM, passwordless sign-in through short-lived links, restricted server access.
Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability, and may set instructions for your data after your death. Write to contact@ghotatechsolutions.com from your account's address: we answer within one month. You can also complain to the French data protection authority, CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr, or to the authority of your EU country.
Children
Flexwall isn't meant for anyone under 16.
Changes
Material changes to this policy are announced by email before they apply.