Privacy

01Who is responsible

LaikaSuite is published by Yann Chrétienneau, a private individual based in France, acting in a non-professional capacity. Full details, including the host, are on the legal notice.

For the one processing of personal data connected with this site — described in section 06 — that person is the data controller within the meaning of the GDPR, and Cloudflare, Inc. is the processor.

02What is collected

Nothing. No account is created, no identifier is assigned, no email address is requested, no usage is measured, and no profile is built. There is no analytics script on any page of this site or in any of the fourteen applications, and no advertising network is present.

This includes the things that are easy to overlook: no error reporting service, no session recording, no heatmap, no A/B testing tool, no embedded video player that would phone home, and no font served from anyone else's server.

03How to check it yourself

Open your browser's developer tools, go to the Network tab, and use any application for as long as you like. You will see the files of the application itself load once, and then nothing. There is no request to any other server because the browser is instructed to refuse one.

The instruction is a Content Security Policy header served with every page. Two of its directives do the work:

• connect-src 'self' — the page may not open a network connection to anywhere but its own origin. Not “does not”: may not. If some future mistake tried, the browser would block it.
• form-action 'none' — no form on any page can submit anywhere at all.

This is the difference between a privacy promise and a privacy guarantee. A promise is a sentence on a page like this one. A guarantee is enforced by software that does not belong to the publisher — your browser — and it keeps holding even if the publisher later makes a mistake.

04Where your documents live

Your documents are stored by your browser, on your device, using its local storage: IndexedDB for the documents themselves and localStorage for small preferences such as your language and theme. They are never transmitted to the publisher, who has no copy and no technical means of obtaining one.

This has a consequence worth stating plainly: clearing your browser's site data deletes your documents, and no one can restore them. Every application can export its work as a file, and the vault can hold it in an encrypted container you keep. Backups are yours to make, and the terms of use list the ordinary actions that destroy data permanently.

05The vault

The vault encrypts its contents on your device with AES-256-GCM, using a key derived from your passphrase with PBKDF2-SHA-256. The passphrase is never stored, never transmitted, and never known to anyone but you.

A vault file can be copied to a USB stick or any drive and opened on another machine; it stays encrypted the whole time, including while it sits on that drive. Nothing about it is readable without the passphrase.

The same design that makes this safe makes it unforgiving: a lost passphrase cannot be recovered. There is no reset, no back door and no support channel that could help, because there is nothing to help with. This is covered again, and more sharply, in the terms of use.

06The one thing that is processed

Honesty requires this section. Serving a website means a server receives a request, and a request carries an IP address. Under the GDPR an IP address is personal data, so a processing exists even though no line of LaikaSuite's code collects anything.

Controller

Yann Chrétienneau — see the legal notice

Processor

Cloudflare, Inc., which hosts and delivers the files

Data

Connection logs: IP address, timestamp, requested file, user agent

Purpose

Delivering the site and protecting it from attack and abuse

Legal basis

Legitimate interest, GDPR article 6(1)(f) — a site cannot be served without it

Retention

Held by the host under its own retention policy; the publisher neither reads, exports nor stores these logs

Transfer

Cloudflare is established in the United States; transfers are covered by the European Commission's standard contractual clauses and the EU–US Data Privacy Framework

07Why there is no cookie banner

Article 82 of the French Data Protection Act requires consent before reading from or writing to your device — except where it is strictly necessary for a service you have expressly requested.

What is written to your device is the document you are working on and your choice of language and theme. Nothing is read for any other purpose, nothing is transmitted, and nothing follows you from one site to another. That is the exemption exactly, so no banner is required.

The absence of a banner here is a considered position, not an oversight. No cookie is set at all: what the suite uses is IndexedDB and localStorage, which are not cookies and are never sent with a request.

08Your rights

In accordance with articles 15 to 22 of the GDPR you have the right of access, rectification, erasure, restriction and objection, and the right to lodge a complaint with the French data protection authority, the CNIL (cnil.fr). Write to astralaika.studio@gmail.com.

Be aware that with no account and no identifier of any kind, the publisher generally holds nothing that could be linked back to you — which is the point. A request for access will honestly return nothing, because there is nothing.

Your documents are not covered by these rights for the simple reason that they never left your device: you already have direct, complete and exclusive control over them, which is more than a right of access would give you.

09Children

The applications are suitable for all ages and ask for nothing. Since no personal data is collected, no account is created and no content is shared, there is no age-gated processing here and no parental consent to obtain.

10Changes to this policy

If this policy ever changes, the date at the foot of this page changes with it. Given what the policy says, the only change that would matter is one that made it say less — and that would be a different product.

11Contact

For any question about this policy, or to exercise a right: astralaika.studio@gmail.com.