Preamble
This policy informs users about the collection and processing of personal data, their rights, the controller, cookies, partner services and the operation of the global storage network.
Legal
Privacy policy
This page explains what data may be collected, why it is collected, how it is used and what your rights are.
Processing principles
Personal data is processed lawfully, fairly and transparently, for defined purposes, and only to the extent necessary for the service to operate.
- Account and member area management.
- Login security, alerts and fraud prevention.
- Payment, earnings, marketplace and payout management.
- Service quality improvement, technical logging and support.
- Compliance with legal and regulatory obligations.
Data that may be collected
- Identification and contact data: username, email and information provided during registration or support requests.
- Technical data: IP address, login times, security logs, API traces and information needed to detect abuse.
- Usage data: files, created links, sales, purchases, earnings, user preferences and member area activity.
- Payment data: payment status, technical references and payment method, with the main financial processing handled by the relevant third-party services.
- Possible additional data: documents sent for verification, payout or regulatory requests.
Collection method
Some data is collected automatically while browsing and logging in. Other data is collected when you create an account, upload a file, generate a link, make a sale, use the API or contact support.
File privacy, encryption and technical access
Files entrusted to the service are encrypted server-side with AES-256-GCM before distribution. Contributor servers receive encrypted blocks and do not, on their own, hold the keys needed to reconstruct plaintext content.
This protects data at rest, but it is not zero-knowledge end-to-end encryption. The StockageEnLigne infrastructure controls the keys and processing needed to restore a file for an authorized download.
StockageEnLigne does not generally monitor or routinely perform human review of private spaces. Exceptional technical access may nevertheless occur at the user’s request, to diagnose an incident, protect the platform, process a sufficiently precise notice or comply with a valid legal obligation. Public links and marketplace publications may be reviewed after a notice.
The absence of routine review does not make prohibited content lawful. Users remain responsible for the files they store, share, publish or sell.
Global storage network
The StockageEnLigne network may include servers located in several regions of the world. Node operators who join the network accept the platform’s technical, security, confidentiality and moderation rules.
These internal rules apply to the operation of the StockageEnLigne network: the platform may suspend, remove, relocate or exclude a node that does not meet security, availability or confidentiality requirements.
The distributed nature of the network does not exempt StockageEnLigne, node operators or users from applicable laws and creates no territorial immunity. Several legal frameworks may need to be considered depending on where the service is established, the people concerned, operator locations and processing locations.
When processing constitutes a transfer of personal data outside the European Union or European Economic Area, it must be identified and governed before the relevant node is used, including through an adequacy decision, standard contractual clauses or another recognized safeguard where required. A node whose legal framework cannot be managed may be refused, suspended or subject to data relocation.
Where available, StockageEnLigne may offer a geographic preference. This preference does not guarantee the exclusive application of a law chosen by the user and cannot be used to circumvent a legal obligation.
Storage servers are not the business source of truth: they host technical blocks or files controlled by the central platform. The platform keeps orchestration, access, removal and security rules in order to preserve the overall safety of the network.
Hosting, processors and partners
The service is operated by StockageEnLigne and may rely on technical providers or partners for processing needed for the website, payments, email delivery, security analysis or content distribution.
When a provider or node operator participates in personal data processing, its role and obligations must be framed according to the facts, processing purposes and applicable requirements.
Cookies, usage measurement and advertising
The stockageenligne.com website may use cookies or equivalent technologies for sessions, security, preference storage and technical service measurement. The main stockageenligne.com infrastructure does not use Google ads.
The blog blog.stockageenligne.com may be hosted on a separate infrastructure and may use Google ads to finance editorial content. This blog infrastructure is separate from the main storage service; users who remain on stockageenligne.com are normally not exposed to these Google ads.
StockageEnLigne may display direct advertising placements on its main service for selected advertisers or partners, without using Google Ads on this infrastructure.
Controller
Personal data is collected by StockageEnLigne. For any question about personal data, you can contact the team at contact@stockageenligne.com.
Your rights
Under the GDPR and applicable law, you may request access, rectification, erasure, restriction of processing, objection or portability of your data, under the conditions provided by law.
If you believe your rights are not respected, you may also contact the competent authority, including the CNIL.
Policy changes
This policy may be changed to reflect changes in the service, the network or legal obligations. The version published on the site applies on the date of consultation.