Privacy policy

Data controller

The POLESTREAM association (24 rue Roussy, 69004 Lyon, France) is the controller for data collected on this website and on event pages of the Pollstream platform.

For any question about your data: info@polestream.fr.

Data collected on this website

The contact form collects your name, your email, your organization's name (optional) and your message. This information is transmitted through our host Netlify's form service and received at info@polestream.fr.

• Purpose: answering your request.
• Legal basis: your consent, expressed by submitting the form.

Data collected on event pages

Live pages created with Pollstream may collect, depending on the configuration chosen by the event organizer:

• Registration to a gated event: name, organization, email and the browser used.
• Invitations: the name, organization and email the organizer entered or imported to invite you, your personal link (never stored in clear text), the email delivery status, the dates of your first and latest visits, and a random identifier for each browser you use (the "ps_device" cookie), used to limit the number of devices per invitation.
• Live chat: your chosen nickname (or, on a gated event, the name you registered or were invited under) and the messages you send, moderated by the organizer. If the organizer bans a connection, its messages are hidden from other participants on the page but kept (nickname, text, date and time, IP address fingerprint) so they can be produced if a complaint is filed; they reappear if the ban is lifted.
• Polls: your answers, linked to an anonymous identifier.
• Q&A: your questions, shown with the name you use in the chat and moderated by the organizer, and your "+1" votes, all linked to an anonymous identifier.
• Electronic voting (invitation-only events): your number of votes and any proxy you gave, set by the organizer; your time-stamped attendance record (your presence, recorded automatically when you arrive during the live event, then each of your votes with its number of votes); your ballots, stored without your name or the time for a secret ballot, and with your name and the time for a recorded vote. The attendance record and the results appear in the minutes and in the organizer's exports.
• Audience measurement: a random visitor identifier, approximate country, region and city, device type, browser and operating system, the site you came from and the length of your visit.

Your IP address is never stored in clear text: we only keep an irreversible fingerprint, used solely to fight abuse (spam, duplicate votes, banning a connection from the chat).

Cookies

The website and event pages only use technical cookies, essential to the service:

• A random visitor identifier (the "ps_vid" cookie) for audience measurement, polls and Q&A, kept for 7 days.
• Access cookies for gated events and identity cookies (the name shown in chat, Q&A and voting), kept for up to one year: access is re-checked at every visit and ends as soon as your registration or invitation is deleted.
• For invitation-only events, a random device identifier (the "ps_device" cookie), kept for one year, which counts the devices used with each personal link.
• Session cookies for organizers signed in to the application.

No advertising cookie, no third-party tracker: this is why no consent banner is required.

Hosting and data sharing

Platform data is hosted in Europe (Paris). It is never sold or shared for commercial purposes.

Three technical processors access it strictly to run the service: Netlify (website hosting and form intake), Supabase (database, Paris) and Brevo (sending the service's emails: invitations, registration codes, reminders and organizer account emails).

Retention periods

We keep your data only as long as strictly necessary:

• Contact form messages: as long as needed to process your request.
• Form registrations and Q&A: automatically deleted 30 days after the end of the event and its replay period, unless automatic deletion is turned off for the event or the event has no end date; they are then kept until the organizer deletes them.
• Invitations and electronic voting: kept until the organizer deletes the event, with no automatic deletion. The organizer can remove an invitee as long as they have neither checked in nor voted and voting has not started; after that, the attendance record and ballots serve as evidence for the minutes and are kept with the event.
• Chat, polls and audience: for the duration of the event and its analysis by the organizer, who can delete chat and polls at any time, and audience data along with the event.
• Cookies: the durations listed above.

Your rights

Under the GDPR, you have rights of access, rectification, erasure and objection over your data. To exercise them, write to info@polestream.fr: we reply within one month at most.

You may also file a complaint with the French data protection authority, the CNIL (cnil.fr).

Updates to this policy

This policy may evolve with the service. The date of the latest update is shown at the top of this page.