Privacy Policy

Last updated: May 1, 2026

1. Data Controller

The services published under the names Alex Studio and AlexWrites (hereinafter collectively referred to as "the Services") are operated by Alexandre Villanueva, independent developer, domiciled in France.

Contact: alexvilcontact@gmail.com

2. Scope

This policy applies to all websites, web applications and mobile applications published by Alex Studio, including but not limited to: the AlexWrites blog (alexwrites.fr), Waku (getwaku.app), Livate (livate.fr), Koda (trykoda.app) and any future service released under the Alex Studio or AlexWrites brands.

3. Personal Data Collected

Depending on your use of the Services, the following data may be collected:

Account data: email address, username (pseudo), hashed password, or data provided through third-party authentication (Google OAuth).
User-generated content: comments, replies, likes and bookmarks associated with your account.
Newsletter subscription: email address provided at the time of subscription.
Usage data: pages viewed, reading time, browser type, operating system, approximate geographic region. This data is collected through Google Analytics 4 and our internal analytics system, and is not used to identify you personally.
Technical data: IP address (stored temporarily in server logs), cookies and local storage tokens required for authentication and theme preferences.

4. Legal Basis for Processing

Under the General Data Protection Regulation (EU) 2016/679, personal data is processed on the following legal bases:

Performance of a contract: data necessary to provide the Services (account creation, comment publication, newsletter delivery).
Legitimate interest: audience measurement and analytics to improve the Services, security monitoring.
Consent: newsletter subscription, deposit of non-essential cookies.

5. Purposes of Processing

Providing and maintaining the Services (account management, authentication, comment system).
Sending newsletters and editorial notifications to subscribers who have opted in.
Analyzing usage and audience to improve content and user experience.
Ensuring the security and integrity of the Services.

6. Cookies and Tracking Technologies

The Services use the following cookies and local storage mechanisms:

Essential cookies: authentication tokens (JWT), theme preference (light/dark mode). These are strictly necessary for the Services to function and cannot be disabled.
Analytics cookies: Google Analytics 4 cookies used to measure audience and understand how visitors interact with the Services. These cookies do not contain personally identifiable information.

You may configure your browser to refuse all or some cookies. Please note that disabling essential cookies may prevent you from using certain features of the Services.

7. Data Sharing and Third Parties

Your personal data is not sold, rented or shared for commercial purposes. Data may be transmitted to the following third-party service providers, strictly for the operation of the Services:

Google Cloud Platform (hosting, infrastructure) : servers located in the European Union (europe-west1, Belgium).
Google Analytics(audience measurement) : data processed in accordance with Google's privacy policy.
Google OAuth (authentication) : only the email address and display name are retrieved when you choose to sign in with Google.

No data is transferred outside the European Economic Area without adequate safeguards as required by the GDPR.

8. Data Retention

Account data: retained for the duration of your account. Deleted within 30 days of account deletion.
Comments and user-generated content: retained for as long as the associated article is published, or until you request deletion.
Newsletter subscription: retained until you unsubscribe.
Server logs: retained for a maximum of 90 days.
Analytics data: retained in accordance with Google Analytics default settings (14 months).

9. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access: obtain confirmation as to whether your data is being processed and, if so, access to that data.
Right to rectification: request the correction of inaccurate or incomplete data.
Right to erasure: request the deletion of your data, subject to legal obligations.
Right to restriction of processing: request limitation of processing in certain circumstances.
Right to data portability: receive your data in a structured, commonly used and machine-readable format.
Right to object: object to data processing based on legitimate interest.
Right to withdraw consent: withdraw your consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact us at alexvilcontact@gmail.com. We will respond within 30 days.

You also have the right to lodge a complaint with the French data protection authority (CNIL): www.cnil.fr.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. Passwords are stored using industry-standard cryptographic hashing. Communications between your browser and our servers are encrypted using TLS.

However, no method of transmission over the Internet or method of electronic storage is entirely secure. While we strive to use commercially reasonable means to protect your data, we cannot guarantee its absolute security.

11. Children's Privacy

The Services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us so that we can take the necessary steps to remove such data.

12. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal or regulatory reasons. The updated version will be indicated by the "Last updated" date at the top of this page. We encourage you to review this page periodically.

13. Contact

For any question or request relating to this privacy policy or to the processing of your personal data, please contact us at: alexvilcontact@gmail.com.

← Back to articles