← Back to Katoptron

Privacy policy

Version 1.0 — 4 August 2026. Compliant with the GDPR (EU Regulation 2016/679) and the French Data Protection Act. This is a translation provided for convenience; the French version is the only binding text.

Your health declarations never leave your device

Sleep, stress, fatigue, medication: these are health data within the meaning of Article 9 of the GDPR. That is precisely why they are never transmitted. All computation is performed locally, in your browser. You can verify this yourself by opening your browser's network tab: no request carries this information.

1. Data controller

Cyril GOHEL, sole trader (entrepreneur individuel) — SIRET 105 305 783 00018. Contact: gohelcyril@gmail.com

2. Data actually collected

Only the data strictly necessary to manage your account and subscription is sent to our servers:

DataPurposeLegal basisRetention
Email addressIdentification, account accessPerformance of the contractLifetime of the account
Account identifierLinking the subscriptionPerformance of the contractLifetime of the account
Subscription statusVerifying accessPerformance of the contractLifetime of the account
Billing historyAccounting obligationLegal obligation10 years
Anti-fraud fingerprintOne free trial per personLegitimate interestAnonymised, irreversible

Never transmitted: your declarations of sleep, stress, fatigue, hydration, alcohol or nicotine consumption, your current medication, your cognitive task results, and your entire history.

3. No trackers, and audience measurement

This site uses no advertising cookies and no third-party marketing trackers, and carries out no profiling. No data is ever sold. The only information stored in your browser belongs to the application itself — your simulation data — and it stays there.

The home page uses anonymous, cookie-free audience measurement (page views, referring site, country, device type, and clicks on the buttons leading to the product), provided by our host. It places no persistent identifier on your device and cannot be used to identify you.

The application and the account area are subject to no audience measurement whatsoever. No declared health data is ever transmitted, measured or observed, at any point.

4. Processors

5. Your rights

You have the right of access, rectification, erasure, portability, restriction and objection.

If you encounter difficulty, you may lodge a complaint with the French data protection authority, the CNIL.

6. Transfers outside the European Union

Account data is hosted within the European Union. Website hosting (Vercel) is provided by a United States company; any transfers are governed by the European Commission's standard contractual clauses. No health data is involved, since none is ever transmitted.

7. Security

Encrypted connection (HTTPS) across the whole service. Passwords of at least 10 characters, enforced server-side. Password changes require recent authentication and the current password. Access to account data is restricted by row-level security policies in the database.

8. Changes

Any substantial change to this policy is notified to subscribed users at least 30 days before it takes effect.