Privacy Policy

1. Scope and data controller

This Policy applies to the public profile pages, tracked outbound links, private analytics dashboard, reporting form, and support communications available through https://akirabbyy.com (together, the “Service”). It does not apply to a third-party website after you leave the Service.

The controller is Nomis IT, a French single-member limited liability company (SARL à associé unique) with share capital of 1,000 EUR, registered under RCS Lille Métropole 921 726 170 · SIREN 921 726 170 · EUID FR5910.921726170, with registered office at 2 ter rue d’Anchin, 59242 Templeuve-en-Pévèle, France. Simon Brienne is the legal representative and director of publication. Privacy questions and rights requests may be sent to contact@nomis-it.com.

2. Interpretation and definitions

In this Policy, Personal Data means information relating to an identified or identifiable person; Usage Data means technical or event information generated by use of the Service; Profile Operator means the person or business whose page and links are published; Service Provider means a supplier processing information for Nomis IT; and you means a visitor, reporter, or authorized dashboard user.

The public Service currently has no visitor account system, contact-upload feature, social-login feature, native application, advertising network, or in-service payment system.

3. Personal Data and Usage Data we collect

Profile and link information

A Profile Operator may provide a display name, username, biography, image, colors, labels, destination URLs, and related configuration. This information is intended to be public when displayed on a profile.

Optional first-party analytics

Only after you choose “Accept analytics,” we may record a profile view or tracked-link click together with the profile and link identifiers, time, coarse country and city supplied by Cloudflare, referring host, UTM campaign values, device class, and an automated bot-like indicator. Our application database does not store a raw IP address. Cloudflare necessarily receives network information, including an IP address, to deliver and protect the Service under its own processing terms.

Reports and communications

When you submit a report, we collect the selected category, your description, the affected profile, time, coarse country, and any optional email address you provide. When you email us, we process your address, message, attachments, and related correspondence.

Private dashboard

An authorized operator supplies an access token. The token is held in browser session storage and sent to the Service for authentication; it is not embedded in the public page. A theme preference may be held in local storage.

4. How information is collected

Information comes directly from Profile Operators and reporters, automatically from your browser and Cloudflare when the Service is requested, and from optional first-party events after consent. We do not import visitor contacts or obtain social-network account data through this Service.

5. How we use Personal Data

• publish, maintain, and secure profiles and links;
• redirect visitors to the destination chosen by the Profile Operator;
• produce aggregated analytics for authorized operators when consent has been given;
• identify likely automated traffic and protect against abuse, fraud, malware, and security incidents;
• receive, investigate, document, and respond to reports, rights requests, and support messages;
• enforce the Terms, establish or defend legal claims, and comply with lawful obligations.

6. Legal bases under European data-protection law

Optional profile-view and link-click analytics are based on your consent. You may withdraw that consent at any time through “Cookies” or “Cookie settings”; withdrawal affects future collection and does not invalidate earlier lawful processing. Operating, securing, and delivering requested pages relies on our legitimate interests and, where applicable, performance of a contract with a Profile Operator. Reports may be processed for legitimate interests in platform safety, compliance with legal obligations, protection of vital interests in urgent situations, and the establishment or defence of legal claims.

7. When information may be shared

We share information only as needed with Service Providers, professional advisers, competent authorities, a successor in a merger or reorganisation, or a Profile Operator when necessary to investigate a report and lawful to do so. We may preserve or disclose information to respond to valid legal process, enforce the Terms, prevent harm, or protect rights and safety. We do not sell Personal Data and do not share it for cross-context behavioural advertising.

8. Service Providers and international transfers

The Service is hosted on Cloudflare Workers and stores application data in Cloudflare D1. Hosting is provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, United States. To limit report spam, the Worker transiently derives a one-way SHA-256 value from the connection address supplied by Cloudflare and uses that value as a Cloudflare Rate Limiting key; neither the address nor that key is stored in D1. The private dashboard may request fonts from Google Fonts. These suppliers may process technical information in countries outside the European Economic Area, including the United States. Where required, transfers are protected by an adequacy decision, contractual safeguards, or another lawful transfer mechanism.

9. Public profile information

Profile names, usernames, images, biographies, and link labels are public by design and may be seen, copied, indexed, or shared by others. Do not provide profile material that you do not have the right to publish. Reports and reporter contact details are not public.

10. Retention

Consent-based analytics events are automatically deleted after approximately 180 days. Reports are normally deleted within 24 months of submission, unless information must be preserved separately for an active investigation, legal obligation, or legal claim. Profile and link configuration is retained while the profile is active and thereafter only while reasonably needed for administration, security, or legal obligations. Browser storage remains until it expires or you clear it. Cloudflare and email-system logs follow the applicable provider retention settings.

11. Law enforcement and other legal disclosures

We may disclose information when we reasonably believe this is required by law, a valid order, protection of a person, investigation of exploitation or abuse, prevention of wrongdoing, or protection of Nomis IT and its users. Requests are reviewed for scope and legal validity where the law permits.

12. Security

We use proportionate technical and organisational measures, including restricted dashboard access, encrypted HTTPS transport, bounded server-side validation, and avoidance of raw IP storage in our application database. No online system is completely secure, so we cannot guarantee absolute security. Contact contact@nomis-it.com if you believe the Service or your information has been compromised.

13. Cookies and browser storage

The public and legal pages use one first-party preference cookie named nomis_consent. It records either “analytics” or “essential,” uses Secure and SameSite=Lax attributes, and lasts up to six months. If you accept analytics, first-party view and click events are enabled; if you reject, those events are not recorded and the profile and links continue to work.

The Service does not currently set advertising cookies. The private dashboard uses session storage for its access token and local storage for its colour-theme preference. You can change the analytics choice using Cookie settings, clear site data in your browser, or enable Global Privacy Control. If Global Privacy Control is detected before you make a choice, optional analytics remain disabled.

14. Children

The Service is intended only for adults aged 18 or over and is not directed to children. Content involving sexual exploitation of minors is strictly prohibited. If you believe a minor’s information or safety is involved, use the Report function immediately and contact the appropriate authorities where urgent.

15. Links to third-party services

Profile links lead to services controlled by other organisations. Nomis IT does not determine those services’ accounts, payments, cookies, age checks, privacy practices, or content. Review the destination’s privacy notice before providing information or completing a transaction.

16. Rights in the EEA, United Kingdom, and Switzerland

Depending on the circumstances, you may request access, correction, deletion, restriction, portability, or objection; withdraw consent; and ask not to be subject to a decision based solely on automated processing with legal or similarly significant effects. This Service does not use such automated decision-making. Rights can be limited by law, including where information must be retained for safety, legal obligations, or claims.

You may complain to the supervisory authority where you live or work. In France, the authority is CNIL, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.

17. United States state privacy rights

Residents of certain U.S. states may have rights to know, access, correct, delete, or obtain a portable copy of covered Personal Data, and to opt out of sale, targeted advertising, or certain profiling. The Service does not sell Personal Data or use it for targeted advertising. We will not discriminate against you for exercising an applicable right.

18. Exercising your rights

Send a request to contact@nomis-it.com and describe the right you wish to exercise. We may ask for information reasonably necessary to verify your identity, authority, and the profile or report concerned. We aim to respond within the period required by applicable law and will explain any lawful refusal or extension. An authorised agent may act where local law permits and their authority can be verified.

19. Browser privacy signals

Global Privacy Control is treated as a choice to disable optional analytics when no prior preference exists. Because “Do Not Track” has no uniform legal or technical standard, the Service does not separately respond to that signal. You can always reject analytics or reopen Cookie settings.

20. Changes to this Policy

We may update this Policy when the Service, suppliers, or law changes. The revised version will be published here with a new “Last updated” date. Material changes will be communicated by an appropriate additional notice where required.

21. Contact

Privacy, support, legal, and safety enquiries: contact@nomis-it.com. Postal address: Nomis IT, 2 ter rue d’Anchin, 59242 Templeuve-en-Pévèle, France.