1. Data controller
The controller for the personal data collected on myspacecube.com is the publisher of MySpaceCube. For any question about this policy or your data, contact us at privacy@myspacecube.com.
2. Data collected
We collect only the data necessary to provide the service: email address, username, password (stored encrypted), payment information (handled directly by Stripe, never stored on our servers), preferred language, and technical connection data (IP address, browser, connection logs). We receive no content created in the application installed on your machine: your budgets, recipes, photos, calendars and other content stay exclusively on your device, and we have no technical means of reaching them. To function, the application does however transmit your licence key together with a device identifier (subscription check and count of covered devices), as well as the installed version (updates). If it crashes, a technical error report — message and stack trace, without your content — may be sent to our incident tracking provider; that report is optional and can be switched off in the application settings. The full detail of these exchanges is published on our "Your data" page.
3. Purposes and legal basis
Your data is processed to: manage your account and subscription (contract performance), secure the platform and prevent fraud (legitimate interest), comply with our accounting and tax obligations (legal obligation), and send service-related communications. No marketing communication will be sent without your explicit consent.
4. Retention period
Your account data is kept for the duration of your relationship with MySpaceCube, then deleted within 30 days of account closure. Billing data is kept for 10 years in accordance with our legal accounting obligations. Connection logs are kept for a maximum of 12 months.
5. Data recipients
We do not sell or rent your data to third parties. It may be shared, strictly as necessary, with Stripe (payment processing), our hosting provider, our technical incident tracking provider (crash reports, hosted in the European Union) and our transactional email providers, all bound by confidentiality commitments compliant with the GDPR.
6. Transfers outside the EU
Some of our providers (notably Stripe) may process data outside the European Union. In such cases, these transfers are governed by the European Commission's standard contractual clauses or any other mechanism ensuring an adequate level of protection.
7. Data security
We implement appropriate technical and organisational measures to protect your data: password encryption, secure connections (HTTPS), two-factor authentication available on your account, and restricted staff access to data.
8. Cookies
We use only technical cookies essential to the service: maintaining your session, language preference, and authentication. No tracking, analytics, or advertising cookies are set, so no consent banner is required.
9. Your rights (GDPR)
Under the General Data Protection Regulation, you have the right to access, rectify, erase, restrict, port, and object to your data. You may also set directives on the fate of your data after your death. To exercise these rights, contact us at privacy@myspacecube.com; we respond within one month at most. If you believe your rights are not respected, you may lodge a complaint with your local data protection authority (in France, the CNIL — www.cnil.fr).
10. Protection of minors
MySpaceCube offers family profiles with parental controls. Creating a primary account is reserved for adults; child profiles are managed and supervised by the account holder, who is solely responsible for the information associated with them.
11. Changes to this policy
This policy may be updated to reflect legal, technical, or functional changes to the service. Any material change will be notified to you by email or via a notice on the site before it takes effect.
Contact
For any question about your personal data or exercising your rights: privacy@myspacecube.com