Last updated: 02/02/2026

Welcome to Mazeshare. We place great importance on protecting your personal data. This Privacy Policy explains what information we collect, how it is used, and your rights as a user in accordance with the General Data Protection Regulation (GDPR).

1. Data controller

The data controller is Mazeshare, reachable at: [email protected]

2. Data collected

When using Mazeshare, we collect the following data:

Email address: required to create and manage your account
Username: chosen by the user for identification
IP address: kept for security reasons and in accordance with legal obligations (1 year)
Connection data: timestamps of connections and actions (legal obligation, LCEN)

Important: File names and metadata are encrypted client-side. Mazeshare technically has no access to the content of your files.

3. Purposes of processing

The data collected is used to:

Provide and maintain the hosting service
Manage your user account
Ensure the security of the service
Respond to judicial requests (legal obligation)
Contact you in case of a problem with your account

4. Legal basis for processing

Performance of the contract: to provide the service
Legal obligation: retention of logs (LCEN, 1 year)
Legitimate interest: security of the service

5. Retention period

Account data: kept as long as the account is active
Connection logs: 1 year (legal obligation, LCEN)
Payment data: handled by Stripe; we do not store your banking details

6. Cookies

We only use strictly necessary cookies:

Session cookie: authentication (httpOnly, secure)
Preferences: language, theme

No advertising or third-party tracking cookies are used.

7. Data sharing

Your data is never sold. It may be shared with:

Stripe: payment processing (subject to the GDPR)
Judicial authorities: on legal request only

8. Transfers outside the EU

Data is hosted on servers located in the European Union. In the event of a transfer to third countries, we ensure that appropriate safeguards are in place (standard contractual clauses).

9. Your rights (GDPR)

In accordance with the GDPR, you have the following rights:

Right of access: obtain a copy of your data
Right to rectification: correct inaccurate data
Right to erasure: delete your data and your account
Right to portability: retrieve your data in a readable format
Right to object: object to the processing
Right to restriction: restrict the processing of your data

To exercise these rights, contact us at: [email protected]
You may also lodge a complaint with the CNIL (cnil.fr).

10. Security

We implement appropriate technical and organizational measures: encryption of data in transit (HTTPS/TLS), client-side encryption of metadata, hashed passwords (bcrypt), restricted access to data.

11. Changes

This policy may be updated. In the event of a substantial change, you will be informed by email or by notification on the Site.

12. Contact

For any question regarding this Privacy Policy:
Email: [email protected]