Privacy Policy
1. Who is responsible
The data controller is CO.FACTORY (trading as Co.Factory), EURL registered with the RCS Paris under number 909764615, whose registered office is at 168 rue de Grenelle, 75007 Paris, France. You can reach us at hello [at] cofactory [dot] group with "Privacy" in the subject.
This policy covers this website, the apps we publish, and our dealings with clients and business contacts. We collect as little as we can, and we do not sell personal data.
2. This website
Hosting
The website is hosted by Vercel. Like any web server, it processes technical request data (IP address, browser type, the page requested) to deliver pages and protect the service.
Analytics
We use PostHog, on its European Union region, to understand how the website is used: pages viewed, time on page, clicks, referring sites, and approximate country and device type. On this website, PostHog runs in cookieless mode: nothing is stored on your device. Instead, PostHog's servers derive an anonymous identifier from your IP address and browser, combined with a secret that changes every day, so visits cannot be linked from one day to the next and your IP address is not kept. We use these statistics only to improve the website.
Our web apps use PostHog too. Unlike the website, they store a random identifier in a first-party cookie and in your browser's local storage, which can last up to a year. You can block or delete it in your browser settings, and your browser's tracking protection usually blocks it too.
3. Our apps
Each app collects only what it needs. Here is what that means app by app.
Word Search
- If you save a profile: a generated three-word passphrase, the display name you choose, your preferences, your games, scores, ratings and trophies. These are stored in our database, hosted by Neon in the European Union.
- Your browser keeps your profile locally so you stay signed in.
- Themes and word lists are generated with AI models through the Vercel AI Gateway. These requests contain the theme and language you choose, not your profile details.
- Usage analytics, as described above, are linked to your profile.
Focus Reader
The text you read, your settings and your reading progress stay in your browser's local storage. They are never uploaded. Usage analytics are collected as described above.
Apps distributed through an app store
Our iPhone apps have their own privacy policy, linked from their App Store page and their website, because they process data differently. Purchases in those apps are handled by Apple, which does not share your payment details with us.
4. Clients and business contacts
When you email us or work with us, we process your name, contact details and our correspondence through Google Workspace, to answer you and to perform and invoice our services. Accounting records are kept for the period required by French law.
5. Why we can use your data
- To provide an app or a service you ask for (performance of a contract)
- To measure and improve our products, and to keep them secure (legitimate interest)
- To keep accounting and legal records (legal obligation)
6. How long we keep it
- Word Search profiles: while you use them, or until you ask us to delete them
- Business correspondence: up to three years after our last exchange
- Client and accounting records: as long as French law requires
- Analytics: no longer than needed to understand how our products are used
7. Who processes it for us
We rely on a small number of providers, under their data processing terms: Vercel (hosting and AI gateway), Neon (Word Search database, European Union), PostHog (analytics, European Union region) and Google (email). Some of them are based in the United States. Where data leaves the European Union, transfers rely on the EU-US Data Privacy Framework or on the European Commission's Standard Contractual Clauses.
8. Your rights
Under the GDPR and French law, you can ask to access, correct, export or delete your personal data, to restrict or object to its use, and give instructions for what happens to it after your death. Write to us at hello [at] cofactory [dot] group. We may need to confirm that a request is yours: for a Word Search profile, that means proving you hold its passphrase.
If you are unhappy with how we handle your data, you can complain to the French data protection authority, the CNIL.
9. Security
We use encrypted connections and reputable providers, and limit access to personal data to what each task needs. No system is perfectly secure, but we will tell you without undue delay if a breach is likely to put your rights at high risk.
10. Children
Our services are not directed at children under 15. We do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.
11. Changes
We will update this policy when our practices change. The date at the top shows the latest version; see also our Terms of Service.