Privacy Policy

Polyglot Publishing — Gaspard Meissonnier, 6 rue d'Armaillé, 75017 Paris, France. SIREN: 989 529 268. [email protected]

This policy is governed by the GDPR (EU 2016/679) and the French Data Protection Act (Loi Informatique et Libertés). The French version is the sole legally binding version.

Browsing: technical data, IP address, pages visited, cookies. Legal basis: legitimate interest and consent (analytics).

Account: email, name, newsletter preference. Legal basis: contract performance; consent (newsletter).

Orders: contact details, order and billing data; postal address for print books. Digital watermark on e-books (indirectly personal data). Legal basis: contract performance, legal obligations, legitimate interest.

Transactional emails via Resend: purchase confirmation, download link, shipping notice. Legal basis: contract performance.

Newsletter via Resend (if consent given). Trustpilot reviews (if consent or legitimate interest).

Strictly necessary cookies: site operation, security, language and consent preferences — no consent required.

With analytics consent only: Google Analytics GA4 (audience measurement) and Microsoft Clarity (session recording, heatmaps). With marketing consent only: Meta Pixel (ad performance measurement and retargeting — Meta Platforms Ireland Ltd.), TikTok Pixel (ad audience measurement — TikTok Inc.) and Microsoft Advertising UET (ad performance measurement — Microsoft Corporation). Meta conversion data is also processed server-side via the Conversions API. Preferences can be updated at any time via the cookie manager. Google Ads (conversion tracking) is also used with marketing consent. Under Google Consent Mode, if these cookies are declined, the Google tags (Analytics and Ads) store no cookie or identifier but may send Google anonymous, aggregated, cookieless signals used to statistically model measurements and conversions; no data identifying you is transmitted without your consent. With marketing consent, your email address is additionally shared with Google in hashed (irreversible) form to better attribute a purchase to an ad click (enhanced conversions); this is optional, can be withdrawn at any time and is never a condition of purchase.

OVHcloud (site hosting on a server in France, domain, PDF file storage), Cloudflare, Inc. (content delivery network, abuse protection, Turnstile bot check), Supabase (database, authentication), Stripe (payments), Resend (transactional e-mails), Lulu Press, Inc. (printing and shipping), Expresta (printing and shipping), Google Analytics GA4 (with analytics consent), Microsoft Clarity (with analytics consent), Meta Pixel — Meta Platforms Ireland Ltd. (with marketing consent, and server-side conversion data processing), TikTok Pixel — TikTok Inc. (with marketing consent), Microsoft Advertising UET — Microsoft Corporation (with marketing consent), Google Ads — Google Ireland Ltd. (ad conversion tracking and enhanced conversions via hashed email, with marketing consent), Trustpilot (customer reviews).

No personal data is sold to third parties for commercial purposes.

Some providers (Cloudflare, Stripe, Google, Microsoft, Meta, TikTok, Trustpilot, Lulu Press, Resend) process data outside the EU, including in the United States. Such transfers are governed by Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent contractual safeguards. Enquiries: [email protected].

Browsing data / cookies: session duration or max 13 months. Account data: until account deletion + legal obligations. Order and billing data: 10 years (accounting obligation). Newsletter: until unsubscription or 3 years of inactivity. Security logs: 1 year.

Access, rectification, erasure, restriction, portability, objection, withdrawal of consent at any time, post-mortem directives.

Contact: [email protected] or Polyglot Publishing, 6 rue d'Armaillé, 75017 Paris, France. Response within 1 month (extendable by 2 months if complex).

You may lodge a complaint with the CNIL (French data protection authority): https://www.cnil.fr

The “?” button on the site gives access to an automated assistant: answers are generated by artificial intelligence from the site's public information and may contain errors. You can ask to be put in touch with a person at any time.

Data processed: the content of your messages, the language, the page you are writing from, and an irreversible fingerprint of your IP address — the address itself is never stored — used solely to limit abuse. Legal basis: legitimate interest (visitor support and service security). Retention: 90 days. If you ask to speak to a person, the email address you provide and the conversation history are sent to our team by email so that we can reply.

Your messages are sent to Google (Gemini API — Google Ireland Limited and Google LLC), which acts as a processor and does not use them to train its models. This involves a transfer outside the European Union, governed by the European Commission's Standard Contractual Clauses. Please do not enter sensitive data or payment details in this window: for anything concerning your order or your account, use the human contact option.

If you leave items in your cart without placing an order, we may send you up to two reminder e-mails: the first after 24 hours, the second after one week. After that second message, nothing further is sent for that cart.

Data processed: your e-mail address, your account language and the contents of your cart. Legal basis: legitimate interest (GDPR art. 6(1)(f)) — telling you about an order left unfinished on your own account. Recipient: Resend, which delivers our e-mails. The record of the send is kept for 12 months.

You may object at any time and without giving a reason: the “stop receiving cart reminders” link appears at the foot of every message, and your mail client may also show an unsubscribe button. Objecting affects neither your order-related e-mails nor the newsletter. Only signed-in accounts are concerned: the cart of a visitor who is not signed in stays in their browser and never reaches us.

About two weeks after you receive your book, we send you a message asking you to rate the translation, the layout and how your order went, with a free-text field. Answering is optional, and not answering has no consequence. If you do not answer, a single reminder follows ten days later, and nothing after that.

Data processed: the ratings and comment you leave, linked to your order, and the language of the message. Legal basis: legitimate interest (GDPR art. 6(1)(f)) — improving our translations and our service from what our readers observe. Recipient: Resend, which delivers our e-mails. The “stop receiving these emails” link at the foot of the message ends these sends without affecting your order-related e-mails. Any public review you then choose to leave on Trustpilot is governed by Trustpilot and its own policy.

When you pay, you give us the email address to which we send your order. Below that field, a box, ticked by default, offers to also send you our new releases and reading recommendations, usually once a month. Simply untick it to receive only the emails related to your order.

Data processed: your email address and the site language at the time of purchase. Legal basis: article L. 34-5 of the French Postal and Electronic Communications Code and article 13(2) of Directive 2002/58/EC — a customer may receive email offers for products similar to those they bought, provided they could object when the address was collected and in every message — together with legitimate interest (GDPR art. 6(1)(f)). Recipient: Resend, which delivers our emails. The address is added only once payment is confirmed, and an address that has unsubscribed is never added again. Retention: until you unsubscribe, or three years after your last purchase.

You may object at any time and without giving a reason (GDPR art. 21): every message carries a one-click unsubscribe link. Objecting does not affect the emails related to your orders.

To understand how the site is used — for instance which pages lead to a purchase, and which lead to the Amazon store where our books are also sold — we count a few browsing actions: arriving on the site, opening certain pages, a click towards Amazon, a purchase. This measurement sets no cookie, records neither your IP address nor the characteristics of your browser, and its results are used only for our own statistics.

To link the actions of a single visit, your browser draws a random identifier and keeps it in its session storage: it disappears when the tab is closed and can link neither two visits together nor a visit to a person. Legal basis: legitimate interest (GDPR art. 6(1)(f)); limited to the site's own statistics, this measurement is exempt from consent under the conditions set by the CNIL, the French data protection authority. Recipient: Supabase, which hosts our database. Retention: 13 months at most. If you refuse audience measurement in the cookie manager, these actions are no longer counted.

To find out which ads and which sites bring readers to us, when you arrive on the site we record where you come from: the previous site, the campaign parameters of the address (utm) and, where applicable, the click identifier added by an advertising platform (Google, Microsoft, Meta). By way of exception to the previous section, this origin is attached to your order, and to your account if you create one or log in to one, so that we know which channel led to which purchase, including when you pay from another tab or another device.

If you accept advertising cookies, the full origin is also kept in your browser's local storage, for 90 days at most after the click, so that it can be recognised from one tab to another, and the click identifier may be passed to the platform concerned to measure its ads. Without this consent, we keep only the channel (for example "Google ad" or the name of the originating site), without any click identifier, in the session storage of the tab, and nothing is passed to the platforms. Legal basis: your consent for the full origin; our legitimate interest in measuring the effectiveness of our sales channels (GDPR art. 6(1)(f)) for the channel alone. Recipient: Supabase, which hosts our database. Retention: that of the order or of the account (section 6). If you refuse both audience measurement and advertising cookies in the cookie manager, no origin is recorded; you may also object to this recording by writing to us.

Where no origin has been recorded for an order (for example because you refused these cookies), we estimate whether it may have come from one of our ads by comparing the billing country, the date and time of the order and the books purchased with the aggregated statistics that advertising platforms provide to us (number of clicks per country, per day or per hour, and per ad). Nothing is read from or placed on your device for this, and nothing about you is passed to the platforms. The resulting estimate (for example "probable ad" or "not an ad") is attached to the order. Legal basis: our legitimate interest in measuring the effectiveness of our ads (GDPR art. 6(1)(f)). Retention: that of the order (section 6). You may object to this by writing to us.

When you use the Chrome extension “Bilingual Translator”, the text of the pages you ask it to read is sent, in pieces, to the servers of Polyglot Publishing, hosted by OVH in France, where it is split into sentences and aligned with its translation. This text is not stored: it is processed on the fly and then forgotten. Only two things are kept, in order to count the free trial: a fingerprint of the address of each page read — a string of characters from which the address cannot be recovered — and the number of characters read. The translation itself is performed by the translator built into Chrome, on your device.

Data processed: the email address of your account, a device identifier drawn at random at installation (to limit a subscription to three devices), the status of your trial or subscription, and your display settings, which Chrome keeps in your browser and synchronises with your Google account if you have enabled synchronisation. Legal basis: performance of the contract (art. 6.1.b GDPR). Payment for the subscription is handled by Stripe. This data is kept for as long as your account exists; the device identifier and the daily reading counters are kept only in memory, for twenty-four hours at most.

This policy may be updated. The date of the latest update appears at the top. In the event of a material change, users will be notified by email or site notification.