Privacy policy

[Nom et prénom ou raison sociale], [adresse postale]. Contact: contact@pokito.top.

Through the form: name, email, brand or website (optional), chosen offer and description of your needs. Nothing else is requested.

To protect the site against abuse, your IP address is used temporarily in memory. The web server (nginx) also keeps a technical visit log (IP address, date, requested page) for at most 14 days, for security and troubleshooting.

Answering your request, preparing a quote or producing your trial video. Legal basis: pre-contractual steps taken at your request (GDPR article 6.1.b).

Three years from our last exchange, then deleted. If a contract is signed, the relevant data is kept for the applicable legal period.

Only Pokito and its technical providers: the host (OVH SAS, 2 rue Kellermann, 59100 Roubaix, France — ovhcloud.com) and the email service (Resend, Inc., a US company; sending from its infrastructure in Ireland) used for the contact form and for client-area emails (sign-in link, confirmation, video ready). No data is sold or shared.

Transfers to the United States rely on GDPR safeguards (EU–US Data Privacy Framework or standard contractual clauses).

If you create an account: name, email, password (stored hashed, never in clear), your projects, the files you upload, the delivered videos and your change requests. Purpose: producing and delivering your videos (performance of the contract, GDPR article 6.1.b).

Your files are stored by OVHcloud in France (Gravelines) in a private, encrypted space: only you and the Pokito team can access them, through temporary links valid a few minutes. Sign-ins and important actions are logged for security (kept 12 months). Accounts never confirmed and without any project are deleted after 30 days.

A strictly necessary session cookie (“pk_session”) keeps you signed in; it is used for nothing else and needs no consent.

You can delete your account and all your files yourself at any time from “My account” (immediate and permanent), or ask us by email. A safety copy of the database (accounts and file names, not the files themselves) is made every night and kept 14 days: a deleted account disappears from these copies within 14 days at most. Deleted files are erased from storage immediately.

No audience-measurement tool is active at the moment and no third-party tracker is loaded. If we enable one, it will be Umami, a cookieless tool that collects no identifying data and honours “Do Not Track”; this page will then be updated.

This site sets no analytics or advertising cookies (only the client area uses a session cookie). If that changes, a banner will ask for your consent first.

You can request access, rectification, erasure, restriction or portability of your data, and object to its processing, by writing to contact@pokito.top.

You can also lodge a complaint with the CNIL (cnil.fr).