Privacy policy

1. Who is responsible

This site is published by Little Omega, trading as EnGarde, 14 allée des pommiers, 14440 Douvres-la-Délivrande, France. Little Omega is the data controller for everything described below.

For any question about this policy, or to exercise the rights in section 6, write to privacy@engarde.cc.

2. What this site collects

Three things, and nothing else.

• Your email address, if you enter it in the waitlist form. We use it for one purpose: to tell you when EnGarde launches. The legal basis is your consent, which you give by submitting the form and can withdraw at any time by emailing us. Submitting that form sends your address to Make (Celonis SE, EU region), the automation service that stores the list for us and receives your IP address as part of that request.
• What you search for in the leak register. A search is a normal page request: the term travels in the URL to our own server, which asks our register for matching breaches and renders the answer. There is no account and nothing to sign in to.
• A language cookie. Pressing FR or EN stores locale in your browser for a year, so the site keeps the language you picked. It holds two possible values, en or fr, and nothing else. It is a preference cookie and requires no consent banner.

There is no analytics on this site, no advertising tracker, no session recording and no error reporter. You can verify that with your browser’s network tab: the only third parties a page load touches are Google Fonts, for the two typefaces, and Make, only at the moment you submit the waitlist form.

Google Fonts is served from Google’s servers, which means Google receives your IP address and browser user-agent when the fonts load.

3. The Engarde extension scanner

This section is about one thing: the Engarde extension scanner, the free extension published on the Chrome Web Store. It reads the extensions installed in your own browser and ranks them by how much access each one holds. It sends nothing anywhere — no account, no server, no network request at all.

The only thing it stores is the list of extensions you chose to ignore, kept in your browser’s local storage on that profile. We never receive it. Uninstalling the extension deletes it.

It reads data about your extensions — their names, permissions, install source. It does not read your browsing history, your tabs, your cookies or the content of any page, and it holds no browser permission that would let it.

4. How long we keep things

Waitlist addresses are kept until we have announced the launch, or until you ask us to delete yours — whichever comes first.

Register searches are answered and not kept as a profile of you. Our servers and our hosting provider keep ordinary technical logs of requests for a short period for security and debugging.

5. Who else sees your data

We do not sell your personal data, and we do not share it for anyone else’s advertising.

Two providers process data on our behalf, as described above: Make (Celonis SE) for the waitlist, and Google (Google Fonts) which receives your IP address when fonts load. This site itself is hosted by Scaleway, in Paris, France.

We would also disclose data where the law requires it.

6. Your rights

Under the GDPR you may ask us to:

• give you a copy of the personal data we hold about you;
• correct it, if it is wrong;
• delete it;
• stop using it, or withdraw a consent you gave;
• send it to you in a portable form.

Write to privacy@engarde.cc and we will answer within one month. If you are not satisfied, you may complain to the CNIL, the French data protection authority, at cnil.fr.

7. Changes

If what we collect changes, this page changes with it and the date at the top moves. The older EnGarde platform keeps its own policy at /archived/en/privacy, which describes that platform rather than this site.