Privacy Policy
Last updated: March 28, 2026
1. Data Controller
Beacon is operated by Honoré Tomaka, an individual established in France, European Union. For any question regarding your personal data, contact us at contact@beaconscreener.com.
2. Data We Collect
Beacon is designed to minimize data collection. We do not require account creation. You are not required to provide any personal data to use Beacon — all data listed below is collected automatically during your visit.
| Data | Purpose | Legal Basis (GDPR Art. 6) |
|---|---|---|
| Page views, clicks, device type | Product analytics | Legitimate interest (Art. 6.1.f) |
| IP address (anonymized) | Abuse prevention, analytics | Legitimate interest (Art. 6.1.f) |
| Error reports | Bug fixing | Legitimate interest (Art. 6.1.f) |
We do not collect names, email addresses, financial data, or any data that directly identifies you, unless you contact us voluntarily.
Our legitimate interest consists in understanding how the service is used to improve it, and in maintaining its security and stability. Given that we process only anonymous or pseudonymous technical data and do not track identified individuals, we consider this processing does not disproportionately affect your rights and freedoms.
3. Cookies & Tracking
We use PostHog (EU instance: eu.i.posthog.com) for product analytics. PostHog is configured with in-memory persistence only — no cookies are set on your device. No third-party advertising trackers are used.
We use Sentry for error monitoring. Sentry processes minimal technical data (stack traces, browser info) solely to diagnose bugs.
You may opt out of analytics tracking at any time by enabling Do Not Track in your browser settings. When we detect this signal, PostHog tracking is disabled for your session.
4. Data Sharing & Transfers
Your data may be processed by the following sub-processors:
- Vercel Inc. (USA) — hosting. Covered by the EU–US Data Privacy Framework (DPF).
- Railway Corp.(USA) — database & backend hosting. Covered by Standard Contractual Clauses (SCCs).
- PostHog Inc. (EU instance) — product analytics. Data stored in the EU.
- Sentry (Functional Software Inc.) (USA) — error monitoring. Covered by the EU–US Data Privacy Framework (DPF).
We do not sell, rent, or share your personal data with any other third party.
5. Data Retention
Analytics data is retained for 13 months, then automatically deleted. Error reports are retained for 90 days.
6. Your Rights (GDPR)
Under the GDPR, you have the right to:
- Access your personal data (Art. 15)
- Rectify inaccurate data (Art. 16)
- Erase your data ("right to be forgotten", Art. 17)
- Restrict processing (Art. 18)
- Object to processing based on legitimate interest (Art. 21)
- Data portability (Art. 20)
Where processing is based on legitimate interest, you may object at any time. We will then cease processing unless we demonstrate compelling legitimate grounds that override your rights.
To exercise any of these rights, email contact@beaconscreener.com. We will respond within 30 days.
You also have the right to lodge a complaint with the CNIL(Commission Nationale de l'Informatique et des Libertés): www.cnil.fr.
7. Automated Decision-Making
Beacon does not perform automated decision-making or profiling as defined under Art. 22 GDPR.
8. Security
We implement appropriate technical measures to protect your data, including HTTPS encryption, strict Content Security Policy headers, and access controls on our infrastructure.
9. Changes
We may update this policy from time to time. Material changes will be indicated by updating the "Last updated" date above.