With your consent, we measure visits to this site with Google Analytics, to learn which pages actually help. If you decline, no measurement cookie is set. Our privacy policy

Start for freeMy space

Legal information

Privacy policy

What CIVIC knows about you, what it does with it, and what it does not do.

Last updated :

This is a translation, provided so that you can read it. Only the French version is legally binding.

In short

CIVIC is designed to know as little about you as possible.

Your account rests on an email address. Your answers, your progress and the study sheets you have read are attached to that account and hosted on our servers, in Europe: you sign in from any device and pick up where you left off. The web service leaves nothing on the computer you are using. On the public site, and only if you accept, we measure visits with Google Analytics; your revision space is never measured. There is no advertising and no advertising pixel.

No data is passed to any administration. Neither the Ministry of the Interior nor a préfecture knows that you use CIVIC, or what you revise on it.

Who is responsible for this data

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Publisher
Alefaweb
Legal form
entreprise individuelle
Address
40 rue des Hameaux, 61000 Alençon
Website
www.alefaweb.fr
Publication director
Calvin Randrianantenaina

For any question about your data, or to exercise your rights, write to our contact address.

What we process, and why

The service processes only the data listed below. Each has an identified purpose and a legal basis within the meaning of article 6 of the GDPR.

  • Your account. Email address, password and, if you choose that sign-in method, the identifier of your Google account. A display name, if you provide one. Purpose: letting you sign in and find your progress again from one device to another. Legal basis: performance of our contract. This data is handled by our authentication provider, Clerk — we never have access to your password.
  • Your application and your language. The application you are preparing for (residence permit, resident card, naturalisation) and your display language. Purpose: serving you the right syllabus and the right interface. Legal basis: performance of our contract.
  • Your revision work. Answers given, scores, mock exams sat, study sheets read, spaced-repetition schedule, run of consecutive days. Purpose: measuring your progress and offering you the right questions at the right time. Legal basis: performance of our contract. This data is attached to your account and hosted in our database, located in the European Union.
  • Your subscription, if you take one out. Customer and subscription identifiers at our payment provider, plan, status and next instalment. Purpose: opening paid access, issuing invoices and keeping our accounts. Legal basis: performance of our contract, then our accounting obligations. Your card details are entered at Stripe and never reach us.
  • The host’s technical logs. IP address, date, page requested, browser type. Purpose: serving the pages, detecting outages and abuse. Legal basis: our legitimate interest in running and protecting the service.
  • Audience measurement on the public site, if you accept it. Pages viewed, where the visit came from (search engine, link), device and browser type, approximate country and city, and a random identifier kept in a cookie. Purpose: learning which pages are read and where visitors come from, in order to improve the site. Legal basis: your consent, which you withdraw at any time through the “Manage cookies” link in the footer. Tool: Google Analytics, which does not store your IP address. It concerns the public site only: neither your revision space, nor your account, nor your answers are passed to Google Analytics.

We process no special category data: no origin, no religion, no political opinion, no health data. Nothing in the service asks you for any, and none should be written into free-text fields.

No automated decision producing legal effects is taken about you. The progress calculation is a revision tool and nothing more: it does not assess you and is disclosed to no one.

What we do not do

  • We do not sell, rent or exchange any data.
  • We use no advertising pixel and no tracking network. Audience measurement is never used for advertising: Google’s advertising features are switched off in it.
  • We send no marketing message without your express request.
  • We pass nothing to the Ministry of the Interior, a préfecture or any other public body, save for a judicial order we would be legally bound to answer.

Where your data is stored

Your revision work is attached to your account and hosted in our database, located in the European Union. That is what lets you find it again from any device, simply by signing in.

The web service keeps none of this data on the computer you are using. That matters when one machine serves several candidates — in a training centre, for instance: once you have signed out, nothing of your progress remains on it.

The mobile application, for its part, keeps a copy on your phone so that you can revise offline. That copy disappears when you uninstall the application.

Your account credentials are hosted by our authentication provider. The site and the application are served by our host.

Some of these providers are established in the United States. The corresponding transfers are framed by the safeguards set out in Chapter V of the GDPR — the European Commission’s standard contractual clauses and, where applicable, certification under the Data Privacy Framework.

The providers involved

The following providers are involved, each for a precise function:

  • Clerk — authentication and account management.
  • Supabase — the database holding your account and your progress, hosted in the European Union.
  • Vercel — hosting of the site and the application, delivery of the pages.
  • Stripe — collecting subscription payments and issuing invoices. An authorised, PCI-DSS certified payment provider; it alone handles your card details.
  • Google (Analytics) — audience measurement on the public site, only if you accept it.
  • Google (YouTube) — only if you start a video, see below.

Each acts as a processor, on our instructions, and has no right to use your data for its own purposes.

For how long

  • Account. For as long as your account exists. You may delete it at any time; the associated data is then erased at our authentication provider.
  • Revision work. For as long as your account exists. You may erase it at any time from the “Settings” screen; deleting the account erases it entirely, including the copy held by the mobile application.
  • Invoices. Ten years from their issue, a period imposed by our accounting obligations. Deleting your account does not erase invoices already issued.
  • Technical logs. Kept for a limited time by the host, for security and diagnostic purposes.
  • Audience measurement. The Google Analytics cookie expires after thirteen months at most, without being extended at each visit; the related statistics are kept for fourteen months at most. Your choice, to accept or decline, is remembered for six months, after which you are asked again.

Your rights

The GDPR grants you a right of access to your data, and rights to rectification, erasure, restriction of processing and portability, as well as a right to object to processing based on our legitimate interest.

Two of these are exercised directly in the service, without writing to us or justifying your request: the “Settings” screen lets you download all of your revision data in a readable file, and erase it. Deleting the account itself is done from “Manage my account”.

For everything else, write to our contact address. We reply within one month. No identity document will be requested if the request comes from the email address linked to your account.

If our answer does not satisfy you, you may refer the matter to the French data protection authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr.

Cookies and local storage

On your first visit, the public site asks whether you accept audience measurement. As long as you have not answered, nothing is measured. Declining is as easy as accepting, and the site works the same way in both cases. You can change your mind at any time through the “Manage cookies” link in the footer: if you withdraw your consent, the measurement cookies are erased.

Only the following mechanisms may be used:

  • only with your consent, the Google Analytics cookies (“_ga” and “_ga_…”), which tell visits apart without identifying you, for thirteen months at most;
  • a session cookie set by our authentication provider, which keeps you signed in — necessary to the service, and exempt from consent on that basis;
  • your browser’s local storage, which remembers your light or dark theme preference and your choice about audience measurement — necessary as well.

Your revision space never loads Google Analytics, whether you accepted or not.

You may erase these cookies and this storage at any time from your browser settings. Erasing the session cookie signs you out, with no consequence whatsoever for your progress: it is stored in your account, and you find it again the next time you sign in.

Videos

The site embeds videos hosted by YouTube, on the platform’s cookie-free domain. Nothing loads until you click “play”: no request is sent to Google before that click, which counts as consent. Playing then triggers YouTube’s own processing, governed by Google’s privacy policy.

Age

The service is aimed at adults engaged in a residence or naturalisation procedure. It is not intended for children under fifteen and does not knowingly collect their data.

Changes to this policy

This policy is updated whenever the processing changes. The date of the last update appears at the top of the page, and account holders are informed by email of substantial changes.