Privacy policy

This policy explains which personal data Your Summaries collects, why, how long it is kept and how you can exercise your rights under the General Data Protection Regulation (GDPR).

Data controller

Your Summaries, reachable at yoursummaries.info@gmail.com. See the Legal notice.

Data we collect

• Account: email address, name and, if you sign in with Google, your profile picture. Passwords are stored hashed, never in clear text.
• Sessions: IP address and browser information of your active sessions, to keep you signed in and protect your account.
• Summaries: the links and titles of the videos you summarize and the generated summaries.
• Credits and purchases: your credit balance and a reference of each purchase. Card details are handled by Stripe and never reach our servers.
• Free trial without an account: a pseudonymised key derived from your IP address (it cannot be turned back into the IP address), used only to count free summaries over 24 hours.
• Security: short-lived request counters derived from your IP address, to block brute-force attacks.
• Audience measurement: anonymous, aggregated page statistics (Vercel Web Analytics, without cookies).

Why we use it (purposes and legal bases)

• Providing the service: your account, your summaries, your credits and purchases — performance of the contract.
• Security, fraud and abuse prevention (rate limits, free trial limits) — legitimate interest.
• Anonymous audience statistics to improve the website — legitimate interest.
• Keeping purchase records — legal obligation (accounting).

We never sell your data and we do not use advertising trackers.

Who receives it (processors)

• Vercel (hosting, audience statistics) — United States.
• Neon (database) — European Union.
• Stripe (payments) — United States / Ireland.
• Google (Google sign-in; Gemini AI, which receives the subtitles of the videos you summarize) — United States.
• Groq (alternative AI provider, receives video subtitles only) — United States.
• RapidAPI (subtitle retrieval, receives the video identifier only) — United States.

Transfers outside the European Union rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

How long we keep it

• Account, summaries and credits: until you delete your account.
• Sessions: 7 days, or until you sign out.
• Free trial counter: reset every 24 hours.
• Purchase records: 10 years, as required by French accounting law.

You can delete your account at any time from My account. Your profile, summaries, credits and sessions are then deleted immediately.

Cookies

We only use cookies that are strictly necessary for the service: the session cookie that keeps you signed in and temporary cookies that secure the Google sign-in. Your display theme is stored in your browser. No advertising or tracking cookies are used, which is why no consent banner is needed.

Your rights

You have the right to access, correct, delete and export your data, and to object to or restrict its processing. You can update your name and delete your account yourself from My account. For any other request, email yoursummaries.info@gmail.com. We answer within one month.

If you think your rights are not respected, you can file a complaint with the French data protection authority (CNIL) — cnil.fr.