GDPR & Your Rights
We're a French company - GDPR isn't a compliance checkbox for us, it's home turf. Here's what you're entitled to and how to exercise it.
Your rights
Right to access
Email privacy@merci.0x12.eu to request access to the personal data associated with your account. The app shows your activity history and signed-in sessions; there is no self-service data-export screen in the current product.
Right to rectification
Your name and email are editable in Settings → Profile. For any other correction, email privacy@merci.0x12.eu.
Right to erasure
You can delete your account from Settings → Profile after confirming with a one-time code sent to your email (or from your authenticator app). Deletion is immediate and irreversible: it signs you out and erases your files and account data. Activity and connection logs are kept for 12 months, and limited records may be retained where the law requires it.
Right to portability
Files can be downloaded individually in their original format from the app. For a portability request covering other account data, email privacy@merci.0x12.eu.
Right to object & restrict
Email privacy@merci.0x12.eu to object to processing based on legitimate interest or to request restriction of processing.
No automated decisions
The current Service does not use solely automated decision-making that produces legal or similarly significant effects about you. Contact the privacy team if you have a concern about a decision.
Where your data lives
Account authentication, the database, file storage, account emails and this website are hosted on Scaleway in Paris (France), using self-hosted Appwrite, acting as our processor. Information about the service providers used to operate MERCI! appears in the Privacy Policy. Email privacy@merci.0x12.eu to ask for the current processor categories and processing locations.
Age of digital consent
You must be at least 15 to use MERCI! in France, and at least 13 elsewhere - or older where local law sets a higher minimum. Below your country's age of digital consent, a parent or guardian has to authorize the account.
How to exercise your rights
Settings lets you update profile information, review your activity history and delete your account. For access, portability, restriction, objection or another privacy request, email privacy@merci.0x12.eu or the DPO at dpo@merci.0x12.eu. You can also lodge a complaint with the CNIL (cnil.fr) or your local supervisory authority.