Privacy policy

This page explains what personal data CalédoStock collects, why, how long it is kept and what your rights are.

Data controller

Data collected and purposes

Cookies

The site sets a single session cookie (CSTOCKSESS), strictly necessary for logging in. It is not used for audience measurement or advertising, and disappears when the browser is closed. As such, it does not require prior consent.

Audience measurement

Visits are counted by the site itself, with no third-party tool: no Google Analytics, no Matomo, no advertising network. Nothing is sent outside, and no cookie is set for this purpose. For each page displayed we record the date, the page address, the domain name of the site that referred you if any, the country, and a technical fingerprint valid for one day only, used solely to avoid counting the same visit twice. That fingerprint changes every day and cannot identify you or recognise you from one day to the next. These records are deleted after twelve months.

The country is determined on our own server from your IP address, using a lookup file installed locally — your address is passed to no one and is not kept: only the country code is recorded. That file comes from the DB-IP database (“IP to Country Lite”, Creative Commons BY 4.0 licence).

Recipients

Your data is not sold, transferred or used for commercial purposes by third parties. It is accessible to the site's publisher and, technically, to the following providers, who act as processors: they process this data only on the publisher's instructions, for the sole purposes described above, and are bound by confidentiality.

• OVH SAS (France) — hosting of the site and database.
• Stripe — card payment processing and issuing of the corresponding invoices. Your card details are entered directly with Stripe and never pass through this site. Stripe receives your name and email address, which are needed to issue the invoice.
• Where applicable, a file storage service for the media themselves. No personal data is stored there: only the video and photographic files.

Your rights

You have the right to access, correct, erase, restrict and object to the processing of your data, as well as a right to data portability.

• Access and correction: directly from the "My account" page once logged in, where you can also export all of your data.
• Erasure: directly from the "My account" page, under "Delete my account", or on request to support@caledostock.com. Your personal data — name, email address, username, password — is erased and your access closed. The history of invoiced transactions is kept in anonymous form: the law requires every sale to be justifiable. Items you have already bought remain usable in your productions, but can no longer be downloaded again from the site.
• Complaints: if you believe your rights are not being respected, you may refer the matter to the competent supervisory authority. The French data protection authority (CNIL) carries out this role for processing governed by the French Data Protection Act; its competence in New Caledonia is set out in the locally applicable texts.

Security

• Passwords stored in irreversibly encrypted form (bcrypt).
• Email address verified by a confirmation link at sign-up.
• Anti-robot check at account creation, with no tracker or third-party service.
• Automatic blocking after several failed login attempts.
• Video and photographic files inaccessible without authentication, served through temporary links.
• Protection against forged requests, and sessions that expire after inactivity.