Last updated: July 2026 · GDPR compliant (EU Regulation 2016/679)
ExNihiloLab
Email : [email protected]
Contact données personnelles : [email protected]
The data collected relates to your free trial account (created with email + password, or via Google Sign-In) and, if you use it, to the request form on the home page:
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Create and manage your account, deliver your alerts | Performance of contract (free trial) | 3 years after last account activity | |
| Password (stored hashed — argon2id —, never in plain text; absent if you sign in with Google) | Authenticate your access to the account | Performance of contract (free trial) | Lifetime of the account |
| Verified email provided by Google (if "Continue with Google") | Create or link your account without a password | Performance of contract (free trial) | Lifetime of the account |
| Monitoring configuration (followed outlets, keywords, alert rules) | Provide the monitoring service and trigger your alerts | Performance of contract (free trial) | Lifetime of the account |
| Request form (name, email, request type, message) | Answer your request and prioritise our roadmap | Legitimate interest (responding to an inbound request) | 12 months after the request |
We do not collect any browsing data, tracking cookies, or sensitive data within the meaning of Article 9 of the GDPR.
Your data is shared with the following sub-processors, solely for the purposes of their role:
| Sub-processor | Role | Location |
|---|---|---|
| Resend | Transactional and alert email delivery (your email address and alert contents transit through this provider) | United States (EU SCCs) |
| Google (Sign-In) | "Continue with Google" authentication — only if you choose this sign-in method | United States (EU SCCs) |
| Hostinger | Website hosting | European Union |
| Formspree | Receiving and forwarding messages from the request form | United States (EU Standard Contractual Clauses) |
| hCaptcha | Anti-bot protection of the request form | United States (EU Standard Contractual Clauses) |
Your data is never sold, rented or transferred to third parties for commercial purposes.
Your account data is hosted in the European Union. Resend (emails), Google (authentication, if used), Formspree and hCaptcha (request form) are US-based companies: transfers to these providers are governed by Standard Contractual Clauses approved by the European Commission, in accordance with Article 46 of the GDPR.
Under the GDPR, you have the following rights regarding your personal data:
Obtain a copy of the data we hold about you.
Correct inaccurate or incomplete data.
Request deletion of your data ("right to be forgotten").
Receive your data in a structured, machine-readable format.
Object to processing based on our legitimate interest.
Request temporary suspension of a processing activity.
To exercise these rights, contact us at: [email protected]. We respond within 30 days. You may also lodge a complaint with your national data protection authority.
This site uses no tracking or advertising cookies. The dashboard sets a single technical refresh_token cookie (HttpOnly, inaccessible to JavaScript) that maintains your session — strictly necessary for the service, it is exempt from consent under the ePrivacy Directive and expires with your session. hCaptcha may set technical cookies strictly necessary for its anti-bot operation on the request form, which are also exempt from consent.
This policy may be updated to reflect legal changes or changes in our practices. The last update date is shown at the top of this page. For material changes, affected parties will be notified by email.
For any question about the protection of your personal data:
[email protected]
ExNihiloLab — exnihilolab.com