Privacy policy
Last updated October 15, 2026
This is an English translation provided for convenience. In case of discrepancy, the French version prevails.
raccour.ci is free, ad-free and account-free. We collect as little data as possible and neither sell nor rent it to anyone. This page explains, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés), which data is processed, why, on what legal basis and for how long.
Data controller
Kiou Studio, SASU with a share capital of 1,000 euros, 173 rue de Courcelles, 75017 Paris, France, registered with the Paris RCS under number 131 516 338 (see the legal notice). Contact for any question regarding your data: email: contact@raccour.ci, phone: +33 7 56 83 80 16, or contact and report form: raccour.ci/en/contact (reason "Request regarding my personal data").
Data processed
| Situation | Data | Purpose | Legal basis | Retention period |
|---|---|---|---|---|
| Creating a short link (including from the QR code or UTM generator) | Destination address, alias if any, creation date, salted and encrypted hash of the IP address | Providing the service; being able to handle abuse | Performance of the service you request; legitimate interest (security) | As long as the link exists; deletion upon request or through moderation |
| Content identification register | IP address, date and time, type of operation (creation, modification, deletion), identifier of the link or business card | Retention obligation of hosting providers; disclosure only upon requisition by the judicial authority | Legal obligation (article 6 of the LCEN, French decree no. 2021-1362 of October 20, 2021) | 1 year, then automatic deletion |
| Limiting abuse | IP address associated with a counter of creations or reports | Preventing the mass creation of links, business cards and reports | Legitimate interest (security of the service) | 15 minutes to 24 hours depending on the counter, then automatic deletion |
| Checking the safety of a destination | Destination address (and links in a business card) sent to Google Safe Browsing, without any data relating to you | Refusing links to phishing or malicious websites | Legitimate interest (protection of internet users) | No retention by raccour.ci; processing by Google under its own rules |
| Dynamic QR code | Successive destinations and their dates (the last 50 at most), hash of the secret link, aggregated scan counters | Allowing the destination to be changed and scans to be displayed | Performance of the requested service | Until the QR code is deleted by you or by the publisher |
| Checking a link or reading a QR code | Address of the link to be checked, sent to our server to follow its redirects and then to Google Safe Browsing. The QR code image itself stays in your browser | Displaying the final destination and its risk level | Legitimate interest (protection of internet users) | No retention by raccour.ci |
| Address suggestions and business search | Text entered in the field (from 3 characters), sent to Google Places or to the IGN Géoplateforme, without any data identifying you | Suggesting addresses and finding a business listing | Legitimate interest (providing the requested service) | No retention by raccour.ci (only an overall monthly counter of calls is kept) |
| Counting clicks on a short link | Aggregated counters: number of clicks per day, approximate country, referring website (domain). No IP address or visitor identifier | Displaying the total number of clicks; publisher statistics | Legitimate interest | As long as the link exists |
| Online business card | Information you enter (name, position, company, phone numbers, email, website, LinkedIn, address, introduction), optional photo or logo, number of views, hash of the secret link | Publishing your business card and allowing your vCard to be saved | Performance of the service you request | Until you delete the business card, or deletion through moderation |
| Link-in-bio page | Name or title, introduction, links, color, optional photo or logo, number of views and clicks per link (without IP address), hash of the secret link | Publishing your link page and giving you its audience figures | Performance of the service you request | Until you delete the page, or deletion through moderation |
| Email signature | Images you add (photo, logo, banner, handwritten signature). If you save the signature: the information you enter (name, job title, contact details, links, texts, settings) and the fingerprint of the secret link. If you import a business card, its public information is read to prefill the form | Display your signature images to your recipients; let you reopen and edit the signature | Performance of the service you request | Images: as long as the signature is in use, or deletion through moderation. Saved signature: until you delete it. Without saving, nothing else is kept (the draft stays in your browser) |
| Wi-Fi, SMS, WhatsApp, email, call, address or event QR code | None: the content (including a Wi-Fi password or an IBAN) is encoded in your browser | Not applicable | Not applicable | No retention |
| vCard QR code | None: the vCard is generated in your browser | Not applicable | Not applicable | No retention |
| Reports and requests | Reason, explanations, link concerned, name and email if you provide them, encrypted hash of the IP address | Handling reports, appeals and your requests | Legal obligation (LCEN, Digital Services Act); legitimate interest | 12 months at most |
| Audience measurement (Google Analytics 4), only if you accept it | Random identifier stored in a cookie, pages viewed, events (creation of a link, QR code or business card), device and browser type, approximate location, referring website | Understanding how the website is used and improving the service | Consent, which may be withdrawn at any time | Cookies: 13 months at most; data in Google Analytics: 14 months |
| Tool usage counters | No personal data: a number of uses per tool and per day (for example "12 QR codes generated"), without cookies or identifiers. The IP address is only used, as a fingerprint, to prevent abuse and is not kept | Measuring how much each tool is used | Legitimate interest | Daily counters: 13 months |
| Hosting provider's technical logs | IP address, date, page requested, browser | Security and proper operation of the hosting | Legitimate interest | Short period set by the hosting provider (Vercel) |
The encrypted hash of the IP address is computed with a secret key: on its own, it does not make it possible to recover the address, but it remains pseudonymized data within the meaning of the GDPR. The logo imported into the QR code generator never leaves your browser.
Online business cards
An online business card is public to anyone who knows its address (raccour.ci/c/…) or scans its QR code; the page is excluded from search engines. The vCard downloaded from the business card contains the same information, including the photo, and is saved in the contacts of the person who adds it: the publisher cannot remove it from those contacts after the card has been deleted. Only publish your own contact details, or those of a person who has authorized you to do so. The service is reserved for persons aged 15 and over.
Link-in-bio pages (raccour.ci/b/…) follow the same rules: public to anyone who knows their address, excluded from search engines, and deletable at any time using the secret link.
Cookies and trackers
- Audience measurement: Google Analytics cookies (
_ga,_ga_*) are only set after your consent in the banner. Without consent, no Google Analytics script is loaded. Accepting or refusing requires the same effort, and refusing does not prevent you from using the website. - Storing your choice: your choice is stored in your browser for 6 months, after which you are asked again.
- Administration area: a strictly necessary login cookie (30 days), reserved for the publisher.
You can change your choice at any time: . Withdrawing your consent deletes the Google Analytics cookies of raccour.ci.
Recipients and processors
Your data is accessible to the publisher and, for the needs of the service, to its service providers:
- Vercel Inc. (United States): website hosting;
- Upstash, Inc. (United States): database, stored in the Frankfurt region (European Union);
- Google LLC (United States): Safe Browsing check of destination addresses and Google Places suggestions;
- Institut national de l'information géographique et forestière (IGN, France): address suggestions from the Géoplateforme;
- Resend, Inc. (United States): sending contact form messages to the publisher, from Ireland;
- Stripe Payments Europe, Ltd. (Ireland): payment of donations, under its own privacy policy;
- Google Ireland Limited and Google LLC: audience measurement, only with your consent. The data sharing options with Google have been disabled.
Where these service providers process data outside the European Union, transfers are based on the adequacy decision concerning the EU-US Data Privacy Framework for certified providers or, failing that, on the standard contractual clauses adopted by the European Commission. Data may also be disclosed to administrative or judicial authorities that request it within the legal framework.
Your rights
You have the rights of access, rectification, erasure, restriction, objection to processing based on legitimate interest and, where applicable, portability of your data, as well as the right to withdraw your consent at any time and to set out instructions regarding the fate of your data after your death. To exercise them: email: contact@raccour.ci, phone: +33 7 56 83 80 16, or contact and report form: raccour.ci/en/contact. We respond within one month, which may be extended under the conditions provided for by the GDPR. Proof that you are the originator of the content concerned may be requested (for example the secret link of a business card).
As there are no accounts, we cannot always link a short link to a person: please indicate the address of the link or business card concerned. Data in the identification register cannot be erased before the end of the legal retention period.
You may lodge a complaint with the French data protection authority, the Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, cnil.fr.
Security
Exchanges with the website are encrypted (HTTPS). Access to the database and to the administration area is protected by secrets and restricted to the publisher. The secret links of business cards are only stored in the form of an encrypted hash.
Changes to this policy
This policy may change along with the services or the regulations. The date of the last update appears at the top of the page.