Skip to content
WebnR

Privacy Policy

Version 1 of Oct 24, 2026

This English version is provided for convenience; in case of discrepancy, the French version prevails.

Last updated: Oct 24, 2026

This policy explains what personal data WebnR processes, why, and what your rights are, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).

1. Data controller

[societe_nom — to fill in Admin › Settings], [societe_adresse — to fill in Admin › Settings] — contact: ADMIN_EMAIL.

2. The principle: your creations are never sent to us

The WebnR application runs on your computer. Your games, scripts, 3D models, images, conversations and the memory learned by WebnR stay on your computer and are never sent to our servers. We have no access to them.

Your requests to the artificial intelligence are sent directly from your computer to Anthropic (Claude) and to OpenAI (ChatGPT / Codex), using your own accounts and in accordance with their privacy policies. WebnR never reads or stores your credentials for these services. You can refuse the use of your conversations for training their models in the privacy settings of your Anthropic and OpenAI accounts.

3. The data we process

  • Account: e-mail, name or username, language, password (hashed, never readable), two-factor authentication secret (encrypted), Google identifier if you use it. Purpose: managing your account. Legal basis: performance of the contract. Retention: until the account is deleted; an account that is never confirmed is deleted after 30 days; an account without a subscription that has been inactive for 3 years is deleted.
  • Subscription and payments: subscription status, dates, Stripe or PayPal identifiers, amounts, invoices, billing address if you provide it. Your card numbers are processed solely by Stripe or PayPal. Legal basis: contract, then legal obligation for invoices. Retention: invoices kept for 10 years (Article L123-22 of the French Commercial Code (Code de commerce)), everything else until the account is deleted.
  • Application licence: public key specific to your computer, computer fingerprint (calculated from hardware identifiers and irreversibly transformed), computer name, WebnR version, date and IP address of the last check. Purposes: checking the licence, binding it to a single computer, preventing fraud and abuse of the free trial. Legal bases: contract and legitimate interest (fraud prevention). Retention: for the duration of the subscription; IP address erased 12 months after the computer is removed; free-trial fingerprint kept without any link to your account in order to prevent repeated trials.
  • Security: log of sign-ins, failed sign-ins and sensitive actions, with IP address. Legal basis: legitimate interest (account security). Retention: 12 months.
  • Consents: date and version of the terms accepted. Legal basis: obligation to provide proof. Retention: until the account is deleted.
  • E-mails: we only send you e-mails related to your account and your subscription (confirmation, security, invoices, end of trial). No advertising, no newsletter without your consent.

We use no audience measurement tools, no advertising, and we do not sell data.

4. Recipients

Your data is processed by [societe_nom — to fill in Admin › Settings] and by the following processors, solely for the purposes of the service:

  • OVH SAS (France): hosting of the website, the database and e-mails;
  • Stripe (Stripe Payments Europe, Ireland): card payment;
  • PayPal (PayPal Europe, Luxembourg): PayPal payment;
  • Google (Google Ireland): only if you use "Continue with Google".

Stripe, PayPal and Google may transfer data outside the European Union, in particular to the United States. These transfers are governed by the EU–US Data Privacy Framework and/or the European Commission's standard contractual clauses.

5. Security

Encrypted connection (HTTPS), hashed passwords (Argon2id), encrypted secrets, two-factor authentication, protection against repeated attempts, cryptographic signatures for the licence and updates, security log.

6. Your rights

You have the rights of access, rectification, erasure, restriction, portability and objection, as well as the right to set guidelines on what happens to your data after your death.

  • Exporting your data and deleting your account: directly in your customer area, under "My data".
  • Other requests: ADMIN_EMAIL. Proof of identity may be requested if there is doubt about your identity. Response within one month.

You may lodge a complaint with the CNIL (French data protection authority) (www.cnil.fr).

7. Cookies

See the Cookies page.