Privacy
How Stunivers processes personal data (GDPR).
This page is generated automatically from the settings currently applied in the back office.
Controller
The controller is the publisher of the Stunivers site. For any data request, use the contact form or your account privacy area (when signed in).
Purposes
- User account: authentication, roles, security (TOTP, sessions, trusted devices).
- Comments and likes: editorial participation and article interaction.
- Contact messages: answering requests sent via the form.
- Security: login rate limiting, alerts, operational IP allowlist.
- Internal StuBlog audience measurement (first-party), only after cookie consent — not Google Analytics; data is not sold or shared for advertising.
- Public internal search: server-side logging of normalized search terms, locale, and result counts to spot missing topics — no raw IP, regardless of cookie consent.
Data concerned
Depending on your use: email, public name, roles, comments, likes, contact messages, IP addresses / user-agents for sessions and trusted devices, essential cookies, server-logged internal search terms (normalized, no raw IP), and (if you accept) first-party audience events (page path, locale, referrer class, mobile/desktop, internal search terms) without raw IP.
Retention periods
The periods below reflect the current site configuration (editable by the administrator):
- Contact messages: 365 days.
- Trusted devices: 60 days (or token expiry).
- Inactive sessions: 90 days.
- Soft-deleted comments: 180 days before hard delete.
- Raw audience measurement events: 90 days.
- Daily audience measurement aggregates: 730 days.
- Server log of internal searches (normalized terms): 90 days.
- Login/register quotas and rate limits: short-TTL caches (minutes to 24h).
Audience measurement (internal)
If you accept via the cookie banner, a first-party StuBlog script sends pageview (and internal search) beacons to this site’s server only. This is not Google Analytics or a third-party ad tool. Data is not sold or shared for marketing. Editorial role sessions (Admin, Author, Editor, Redactor, Contributor) are not recorded. Refusal does not block reading the blog; you can withdraw consent via the cookie icon.
Cookies
Cookies actually used by this site, based on the current configuration:
- Session cookie — Keeps your authenticated session and CSRF protection. (essential)
- Consent cookie — Stores your Accept / Reject choice for the cookie banner. (essential)
- First-party audience measurement — Enabled only after acceptance; internal pageview beacons (no third-party ad trackers). (optional (consent))
Essential cookies for site operation (session, consent) do not require consent. No Matomo or Google Analytics tracker is loaded. Internal StuBlog audience measurement activates only after acceptance via the banner; refusal leaves the site fully usable.
Your rights
You have rights of access, rectification, erasure and portability where applicable. Accounts can exercise them in the profile Privacy area; complex cases should use the contact form.
