Privacy policy

Who is responsible

The controller of the personal data described on this page is Lois Salmon, publisher of the andon-app.org website and of the Andon application.

For any question about this policy or about your data, write to that address. The contact address is protected by ALTCHA, a self-hosted, cookie-free anti-spam check; no data is sent to third parties.

What the website collects

When you visit the site, the audience measurement tool Matomo records:

• the pages viewed, the date and time of the visit, the files downloaded and the page you came from (referrer);
• your browser and device type, operating system, screen resolution and browser language;
• your IP address, which Matomo anonymises before storing it by masking its last two bytes.

Matomo uses no cookies. The site sets a single cookie, andon_lang, only when you choose a language with the EN / FR switch, to remember that choice. Your theme and, if you use it, your refusal of statistics are kept in your browser’s local storage and never leave it.

Like any web server, the site’s server writes each request to its access log: IP address, date and time, page requested, referrer and browser identification.

What the app sends

Your projects, tasks, notes and files never leave your computer. The Andon app contacts the website’s server, at andon.daelis.fr, in three cases only:

• Update checks, at each start and when you click Check for Updates. The request states the installed version of Andon, the operating system and processor type (for example win-x64), and the version of the update component (Velopack).
• Plugin catalogue, at each start (to flag plugins with an update) and when the Plugin Manager opens. The request states the version of Andon.
• Downloads, when you install an update or a plugin.

Like any request to a website, each one also reveals your computer’s IP address and the time of the connection. The app sends no identifier, no account and nothing about the content of your projects.

These requests are written to the server’s access log. Once a day, a program reads the previous day’s log and sends Matomo, for each request: its kind (update check, catalogue or download), the version of Andon, the date and time, the software identification, the IP address, which Matomo anonymises as it does for a website visit, and an anonymous visitor identifier. That identifier is computed from the address with a key drawn at random each day and never stored: the same computer is counted once a day, but the identifier can neither be traced back to the address nor link one day to the next. This gives us anonymous usage figures: active installations, versions in use, plugin downloads.

When you paste content that links to images on the web, Andon fetches those images from their own site, not from ours; that site’s privacy policy then applies. The user guide gives the same information.

Why

These data serve one purpose only: anonymous audience statistics, to know how many people visit the site and use Andon, which versions are in use and what to improve. The server logs are also used to keep the site running and secure.

There are no user accounts and no advertising. The data are not used for profiling, not combined with any other source, and never shared with or sold to anyone.

Legal basis

The statistics for the site and the app rely on our legitimate interest in measuring their audience (Article 6(1)(f) GDPR). Under the guidelines of the CNIL, the French data protection authority, on audience measurement, they are exempt from consent: Matomo is installed on our own server, is used for audience measurement only, uses no cookies and anonymises IP addresses, and the data are neither combined with other processing nor passed on to third parties. That is why the site shows no consent banner.

The server logs rely on the same legitimate interest, and on the host’s legal obligations to retain connection data.

Where and for how long

Matomo runs on our own installation, matomo.daelis.fr. Matomo and the website are hosted in France by OVH SAS (see the legal notice). The daily import runs on a server rented from Hetzner Online GmbH in Finland: it reads the logs in memory and keeps none of them. No data leaves the European Union.

Your rights

The GDPR gives you the right to access your data, to have it corrected or erased, to restrict its processing and to object to it. To exercise these rights, write to the email address given under Who is responsible. Because IP addresses are anonymised, we may be unable to find any data about you; giving the date, time and IP address of the visit or request helps the search. We reply within one month.

If you believe your rights are not respected, you can lodge a complaint with the CNIL, online at cnil.fr/fr/plaintes or by post: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.

Do Not Track and opting out

If your browser sends the Do Not Track signal, Matomo records none of your visits.

You can also refuse statistics in this browser with the button below. The choice is kept in your browser’s local storage, without a cookie, and the measurement code is then no longer loaded. The button needs JavaScript; without it, only the Do Not Track setting applies.

The app’s requests reach the server like any download, so they appear in its log. To object to their being counted, write to the email address given under Who is responsible.

Changes to this policy

This page will be updated if the data collected changes. The date at the top of the page is that of the last change.