Privacy policy
Version 1.0 — effective 28 October 2026
This is a translation. In case of discrepancy, the French version prevails.
This policy describes the processing of personal data carried out on the hcli.net website. It is not a set of terms of service.
1. Data controller
The data controller is Clément Chausson, acting for the HCLI project.
Contact for any question about your data: contact@hcli.net.
No Data Protection Officer (DPO) has been appointed; requests concerning your personal data are handled at the address above.
2. The short version
- No cookies, no advertising trackers, no analytics.
- No newsletter: we send a single email, when the console opens, and only if you ask for it.
- No sale, rental or sharing of your data.
- No profiling, no automated decision-making.
The site has exactly one form — the waitlist (section 3.3). Every other page can be read without an account and without providing any data.
3. Processing operations
3.1 Browsing the site
Browsing requires no account and sets no cookie. Like any online service, it generates technical logs: IP address, date and time, requested page, browser type, response code.
These logs are used solely to keep the site available and secure (attack detection, incident diagnosis). They are never used for commercial purposes, never cross-referenced with other data and never used for profiling.
- Legal basis: legitimate interest in securing and maintaining the service (Art. 6(1)(f) GDPR).
- Retention: 30 days maximum.
3.2 Contacting us by email
Contact links open your own email client: the site itself transmits nothing. If you write to us, we process your email address, your name if you choose to give it, and the content of your message, solely in order to reply.
Such exchanges do not subscribe you to any mailing list.
- Legal basis: your request (pre-contractual measures, Art. 6(1)(b) GDPR) or our legitimate interest in answering enquiries (Art. 6(1)(f)).
- Retention: 12 months after the last exchange, unless a legal obligation requires otherwise.
3.3 Waitlist
When you join the waitlist, we collect:
- your email address;
- the language of the page you signed up from;
- the form location (home page, pricing, console), for measurement purposes;
- the date of your consent and, where applicable, the dates of confirmation and unsubscription;
- a hash of your IP address (HMAC-SHA256 with a secret we hold), used solely to limit abuse. The raw IP address is never stored.
We collect no name, no company, no phone number and no sensitive data. The service is aimed at professionals and is not intended for minors.
Purpose: to notify you by email when the HCLI console opens publicly and, if you wish, to send you the pricing grid.
Legal basis: your consent (Art. 6(1)(a) GDPR), materialised by double opt-in: nothing is sent until you click the confirmation link delivered to your address. That link is valid for 24 hours and can be used once. Every email contains an unsubscribe link.
Retention:
- unconfirmed signup: deleted automatically after 30 days;
- confirmed signup: kept until you unsubscribe, and at most 24 months after confirmation;
- IP hash: 30 days;
- proof of consent (address, date, status): kept for as long as the signup exists, so that we can demonstrate your consent.
4. Who receives your data
Your data is accessible only to the people operating the service. It is processed:
- on our own infrastructure — the mail server that sends confirmation and unsubscribe emails, and the waitlist database. These servers are operated by us and hosted in France;
- by Cloudflare, Inc., a technical processor for website delivery, the tunnel to our API, TLS termination and DNS;
- by our hosting provider, for the supply of servers and bandwidth, without access to the data they hold.
None of these providers uses your data for its own purposes. Your data is never sold, rented or shared for advertising.
5. Transfers outside the European Union
Our infrastructure, including our mail server, is operated by us and located in France. Website delivery and the tunnel rely on Cloudflare, Inc. (United States), which involves technical access from the United States. That transfer is governed by the European Commission’s Standard Contractual Clauses and by Cloudflare’s Data Privacy Framework certification.
No other transfer outside the European Union takes place.
6. Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw your consent at any time.
Write to contact@hcli.net: we reply within one month, extendable by two months for complex requests. Proof of identity may be requested where there is reasonable doubt about your identity.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. One click on the unsubscribe link in any email, or a message to the address above, is enough.
Providing your email for the waitlist is optional: without it, we simply cannot notify you when the console opens.
If you believe, after contacting us, that your rights are not being respected, you may lodge a complaint with the CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — or online at cnil.fr.
7. Cookies and trackers
The site uses no cookies, no advertising trackers and no analytics.
Your choice regarding the information banner is stored locally in your browser (local storage) and is not transmitted to anyone. The signup form sets no cookie.
8. Security
Traffic is encrypted (TLS). IP hashes and confirmation/unsubscribe tokens are stored hashed: they allow neither recovery of the IP address nor reconstruction of a valid link. Database access is restricted to the services that need it, and credentials are held in a secrets vault.
In the event of a data breach likely to result in a high risk to your rights and freedoms, you will be informed under the conditions set out in Art. 34 GDPR.
9. Changes to this policy
This policy may change, in particular when the console opens and accounts are created. Any change is published on this page with a new version number and a new effective date. Data collected before a change remains governed by the version in force at the time of collection.