Orvel account privacy

Orvel (Antoine LE BORGNE, entrepreneur individuel, SIREN 109 657 700) operates this account service. Contact privacy@orvel.dev to exercise your access, correction or deletion rights.

We store your email, verified sign-in methods, password hash if you set a password, and session records to secure your account. Google sign-in requests only your identity and email; it does not request Gmail or Drive access. Matching emails do not automatically merge existing accounts.

Participating products receive a stable account identifier and verified email. Each product retains its own billing, workspaces, permissions and retention rules. Deleting one product workspace does not delete your shared Orvel account.

Railway hosts the service and database; Resend delivers authentication messages; Google authenticates you only if you choose Google. These providers may process data outside the EEA using their applicable transfer safeguards.

Essential, host-only sign-in cookies keep you signed in for up to 30 days. Short-lived cookies protect login redirects. We do not use advertising cookies here. Account information is retained while the account is active; request account deletion through privacy@orvel.dev. Security and backup records may be retained for limited operational or legal reasons.

The legal basis is performance of the account service and our legitimate interest in security. You may complain to the CNIL.