Privacy and personal data
Version 2026-11-12.3 · VANOIX
Who is responsible?
Vanoix is the controller for fd-one accounts, admissions, projects, upvotes, applications, reports and service security. privacy@fd-one.dev is a privacy contact, not a claim that a statutory data protection officer has been appointed.
GitHub sign-in and public profile
Authentication requires GitHub. We use its stable account ID and import public profile information such as username, display name, avatar, biography, location and public links. Profiles and published projects are public; search engines may index them. GitHub access tokens are not stored durably by fd-one. GitHub independently handles its own authentication and services; loading an external GitHub avatar can also disclose your network address to that provider.
At sign-in, fd-one requests the GitHub user:email permission to retrieve your primary verified email address for private transactional notifications. The address is stored separately from the public profile, is never used to match or merge accounts, and is refreshed at sign-in. Existing members need to sign in again to supply this address.
Purposes and legal bases
Account access, invitations, publication and upvotes provide the service you request. Admission checks, fraud prevention, reports and moderation support our legitimate interest in protecting the community. Applications include a GitHub account, private contact email, proposed project and message, used to consider access. Required fields are identified. There is no advertising or newsletter subscription in this version.
We send transactional emails about application decisions, project visibility, account access and report resolutions. An inviter may optionally enter a contact address to send a personal invitation. Messages use the private application address, the address provided by the inviter, or the member’s verified GitHub address as appropriate; they are not marketing subscriptions. Delivery queues store the recipient and rendered message for reliable delivery and retries, with access limited to necessary service operators and mail infrastructure. Development delivery is captured locally in Mailpit.
Optional audience measurement with Umami
Vanoix uses a self-hosted Umami instance at analytics.vanoix.com, hosted with OVH, to measure visits to public fd-one pages and improve the service. The optional tracker is loaded only after you choose Accept analytics. Refusing does not restrict access. You can withdraw your agreement using Analytics choices in the footer or the Cookies page; withdrawal stops subsequent measurement without undoing processing that already took place. The legal basis for this optional processing is consent.
The integration sends the public page path or route category, a generic page title and the site hostname. Search parameters, URL fragments and referrers are removed; developer profile routes are grouped without their account identifier. It does not send your GitHub identity, contact email, form contents, invitation link or moderation records. There are no custom events, user identification, advertising, session replays, heatmaps or error/performance recording in this integration. Administration, studio, sign-in, application forms, invitation pages and error pages are excluded, even if you previously agreed.
Your browser connects directly to the analytics server after agreement. That connection necessarily exposes a network address and browser information to the server and its hosting infrastructure; Umami can derive device/browser information and approximate location. Cookie-free does not mean that no personal-data processing occurs. We do not claim that self-hosting alone establishes anonymity or an exemption from consent.
Access to the self-hosted statistics is for authorised Vanoix operators and necessary hosting support, not advertising audiences. Umami is hosted with OVH. Self-hosting does not automatically impose a data retention limit; retention and infrastructure logs are managed separately from your browser preference. Contact privacy@fd-one.dev for information about the deployment location, current retention settings, deletion and your rights.
Reports and moderation records
We process reports, explanations and relevant account or project identifiers to examine concerns and document moderation decisions. The administration also keeps audit records of actions such as publication, withdrawal and access restrictions. These records support abuse prevention and the handling of complaints and appeals under our legitimate interests, and legal obligations where applicable.
Report reasons and internal audit information are not public gallery content. Access is restricted to authorised administration and necessary technical providers; disclosures to competent authorities may be required by law. Send only information needed to explain the issue, and do not attach unlawful material or unnecessary sensitive personal data.
The affected applicant, member or reporter receives the reason relevant to their own decision by email. Internal report text, reporter identity and unrelated administrative records are not sent to the project author. Write decision reasons with their recipient in mind.
Public and private information
Author profiles and visible projects are public. Aggregate upvote counts are public; the service records the member-to-project vote relation internally. Application emails, report reasons and moderation records are restricted to authorised administration. An approved application does not automatically publish its proposed project.
Public descriptions, profile fields and project links can be accessed without membership and may be indexed, cached or copied by search engines and other visitors. Do not post passwords, access tokens, confidential information or another person’s personal data without a lawful basis. Public availability does not remove anyone’s data protection or intellectual property rights.
Withdrawing a listing removes its public display on fd-one but cannot by itself recall copies held by independent sites. Where data protection law requires further steps, Vanoix remains responsible for the measures applicable to it. Contact privacy@fd-one.dev about such copies and your rights.
Projects can include an uploaded cover image. fd-one converts it into a resized WebP without embedded metadata and stores it in private object storage. Covers of public projects are served publicly through fd-one; the storage bucket itself is private.
Hosting, recipients and transfers
The fd-one sites and the self-hosted Umami audience measurement service use OVH hosting. Only authorised staff and necessary technical providers access restricted information. Contact privacy@fd-one.dev for details about deployment locations, technical providers and infrastructure logs. GitHub is an external provider: OVH hosting does not establish that all processing stays in France or the EU.
Opening an external project, repository or demo takes you to a provider with its own data practices; it may receive your network address and information you submit there. Review its privacy policy before sharing data. A project appearing on fd-one does not mean Vanoix operates it or controls its processing.
Retention and removal
Sessions last up to 30 days; OAuth attempts expire after ten minutes and expired technical data is periodically cleaned. Removing a project hides it from the public gallery but does not automatically erase every stored record, vote or audit event. Contact privacy@fd-one.dev for the applicable account, application, moderation, delivery-queue and backup retention details or an individual deletion request.
The browser treats an analytics permission or refusal as expired after 180 days, unless you change it or clear storage sooner. Expired choices are removed on the next visit. This preference duration is not the analytics server retention period. Self-hosted Umami does not impose automatic deletion by default; contact privacy@fd-one.dev about the current analytics and infrastructure-log retention settings.
Your rights
Depending on the processing, you may request access, correction, deletion, restriction, portability or object to a legitimate-interest processing. A consent can be withdrawn. These rights must also protect other people and applicable legal obligations. Contact privacy@fd-one.dev with the relevant service and account; do not send a password or identity document by default. The normal response period is one month, with any lawful extension explained. You may complain to the French CNIL.