Data use policy
This document is drafted in French, which is the only authoritative language. Its English, Spanish, Italian and German versions are courtesy translations: in the event of any discrepancy, the French version prevails.
Data controller
410-GONE.FR, simplified joint-stock company (société par actions simplifiée) with a share capital of €1,293
Registered office: 6 place Dumas de Loire, 69009 Lyon, France
RCS Lyon 833 685 217, SIRET 833 685 217 00014, APE code 6202A
Telephone: 04 28 29 46 08, email: contact@410-gone.fr
What we process, and why
Your account
Surname, first name, email address, company and interface language, taken from the 410-GONE.FR identity directory that authenticates you. Purpose: to give you access to the service and to secure it. Legal basis: performance of the contract.
Your billing
Billing address and VAT number, amount, date and reference of each payment. Purpose: to issue and keep your invoices. Legal basis: performance of the contract and our accounting obligations. No bank card data passes through our servers: payment is processed by Stripe.
Your projects
The domains you declare, the addresses and text content of the crawled pages, their response codes, the URL files you import, the suggested and validated URL matches, and the staging access credentials you provide. Purpose: to provide the service. Legal basis: performance of the contract. These data relate to your websites; they contain personal data only if your pages publish any.
Search Console, if you connect it
With your authorisation, read-only access to your Google Search Console properties, kept for the duration of your session, in order to import your website’s pages and their search statistics. Legal basis: your consent, which you may withdraw at any time from your Google account. The imported pages and statistics become part of your project and follow its retention period.
Technical logs
IP address, date and page requested, kept by the server. Purpose: security of the service and incident resolution. Legal basis: the publisher’s legitimate interest.
Your messages
What you write through the contact form or “Help and support”: email address, name, phone number if given, subject and message, and your account if you are logged in. Purpose: to answer you and follow up your request. Legal basis: legitimate interest, or performance of the contract for a customer.
The newsletter
If you subscribe: your email address, the language of the subscription, the date and text of your consent, and the date you confirmed it through the link you received. Purpose: to send you the Swan newsletter. Legal basis: your consent, which you can withdraw at any time through the unsubscribe link in every issue.
Who these data are shared with
- NEXYLAN: hosting of the website, the service and the data, in France.
- Stripe (Stripe Payments Europe, Ireland): collection of payments and issuing of invoices. Stripe may transfer certain data outside the European Union under the safeguards provided for by the GDPR.
- Google: only if you connect Search Console, to read your data; no data from your projects is sent to it.
The identity directory and the semantic similarity calculation are operated by 410-GONE.FR on its own servers. No data is sold or transferred for advertising purposes.
How long
- Account: for as long as you log in to the service. After three years without logging in, it is anonymised: your identity, billing address and projects are erased; credit records and invoices, which are accounting records, are kept for ten years. You may also request its deletion at any time.
- Projects: until you delete them, and at most for as long as your account exists.
- Invoices and accounting records: ten years, the statutory period; they cannot be deleted on request.
- Search Console access: the duration of your session.
- Technical logs: twelve months at most.
- Messages: the time needed to handle your request, at most three years after the last exchange.
- Newsletter: until you unsubscribe. A subscription never confirmed is erased after thirty days.
Cookies
The service sets a session cookie, strictly necessary for you to log in; the identity directory sets its own when you log in to it. No audience measurement or advertising cookie is set: this is why no consent banner is shown to you.
Third-party resources loaded by the site
To display, the site loads its interface library (Bootstrap) from the jsDelivr network and a font from Google Fonts: these services receive your IP address on that occasion. Some articles embed YouTube videos in privacy-enhanced mode (youtube-nocookie.com): YouTube stores nothing until you start playback.
Security
Exchanges are encrypted (HTTPS). Access to the data is restricted to the people who need it to provide the service. Passwords are not stored by Swan: they are verified by the identity directory.
Your rights
You have the right of access, rectification, erasure, restriction, objection and portability. Write to contact@410-gone.fr; you are entitled to a reply within one month. Proof of identity may be requested if there is any doubt about your identity. You may also lodge a complaint with the CNIL (www.cnil.fr).
Last updated: 25 October 2026.