← Noys

Privacy Policy, Noys

Last updated: 28 May 2026

1. Data controller

Data is processed by:

LE POUDER BRICE

Sole proprietor

Email: noys@brice.design

2. Data collected

This policy covers both the website / landing page and the Noys mobile application. The website only processes limited data; the mobile application processes broader data to provide the signed-in service.

a) Website / landing page

On this page, Noys does not provide user account features. Data is limited to site operation and the services explicitly listed below:

  • Website / landing page analytics consent or refusal choice kept in browser localStorage for 15 days
  • PostHog cookies or equivalent storage only after acceptance
  • Website audience analytics after consent
  • Technical data needed to load the page and display the Apple MapKit JS demo map

If you decline, PostHog is not loaded, known PostHog storage is cleared and the decline choice remains stored in the browser for 15 days. After expiry, the banner is shown again.

b) Mobile application

In the mobile application, processing is broader because it supports signed-in, reading and recommendation features:

  • Account and authentication: email address, technical authentication identifier, sign-in provider (email, Google or Apple) and session tokens stored locally.
  • Profile: display name if you set one, feed session identifier, no avatar.
  • Articles and recommendations: opened articles, browsing history, favourites, reading progress, recommendation-related data, shares and summary requests.
  • Search and preferences: search history stored locally on the device, language, theme, acquisition source and technical preferences.
  • Location: if you allow it, location is used to display nearby articles and the map; coordinates may be sent to the Noys server, Wikimedia or Apple services needed for that feature.
  • Mobile analytics: usage events, screens viewed, signed-in user identifier, feed session identifier, device / OS / app version and stability technical information via PostHog when configured.

The website consent banner only controls the landing page. It is not a global opt-out for analytics or processing required by the mobile application.

3. Purposes

Data is used to:

  • Display the website and its functional services, including the demo map
  • Measure landing page audience after consent
  • Provide mobile application features
  • Enable account creation, authentication and account deletion
  • Enable saving favourites, reading progress and history
  • Generate recommendations, nearby results and requested summaries
  • Improve the product and ensure technical security and stability

4. Legal basis

  • Service execution (account management, mobile features, favourites, recommendations, summaries on request)
  • Consent (non-essential website analytics cookies / storage; location permission in the app when requested by the OS)
  • Legitimate interest (configured mobile analytics, product improvement, security and technical stability)

5. Hosting and sub-processors

Data may be processed via:

  • Supabase (authentication, profiles, favourites, reading progress and user data)
  • Hetzner VPS server and Redis (API, article history, recommendations and technical data)
  • PostHog (website analytics only after consent; mobile analytics, technical events and mobile app error tracking when configured)
  • Apple MapKit JS (functional map display on the landing page) and Apple services needed for maps / location in the app
  • Wikimedia / Wikipedia APIs (search, article content and nearby results)
  • Vercel AI Gateway / configured AI provider (article summaries only when the user requests a summary)

Data is hosted in the European Union where possible.

6. Data retention

  • Account, profile, favourites and reading progress data: retained as long as the account is active
  • Article history and recommendation data: retained for a period proportionate to service needs and removable through reset or account deletion where available
  • Website / landing page analytics consent or refusal choice: retained in browser local storage for 15 days; after expiry, the banner is shown again
  • Mobile app local preferences and search history: retained on the device until deleted in the app or through system data controls
  • Location data: used for nearby search and map display; Noys does not keep it as account data, but rounded nearby searches may be cached for performance
  • Technical and analytics data: retained for a period proportionate to security, stability and measurement needs

7. Account deletion

The user may request account deletion at any time.

Deletion results in the removal of data associated with the account, subject to legal obligations.

8. User rights

In accordance with the GDPR, you have:

  • A right of access
  • A right of rectification
  • A right of erasure
  • A right of objection

To exercise your rights: noys@brice.design

9. Cookies, local storage and third-party services

The website and the mobile application do not use the same consent mechanism.

  • On the website / landing page, localStorage keeps the consent or refusal choice for 15 days.
  • On the website, PostHog is only loaded and only measures audience after acceptance.
  • After acceptance on the website, PostHog may use cookies or equivalent storage to distinguish visits.
  • Apple MapKit JS may be loaded on the landing page to display the demo map; map requests are then processed by Apple as a functional service.
  • In the mobile application, local storage keeps items such as the authentication session, preferences, feed identifier and local search history.

You can delete the website choice from your browser settings; the banner will be shown again when no choice is present or after the 15-day period expires. In the app, account deletion or local data deletion follows the options available on the device and in the service.

10. Policy modifications

This policy may be modified at any time.

The applicable version is the one published on this page.