Privacy policy

Updated 07/08/2026

In short: reading this site requires no account and sets no analytics cookie until you accept one. The only personal datum we can hold is an email address, and only if you choose to create an account.

1. Controller

The data controller is the individual who publishes this site on a non-professional basis (see the legal notice). For any question about personal data, or to exercise your rights: legal@noblablafinance.fr.

2. What is processed

Data	Purpose	Legal basis	Retention
Technical logs at our host (IP address, headers, timestamp)	Serving pages, security, abuse limits	Legitimate interest (art. 6.1.f)	Per Cloudflare's policy, ordinarily a few days
Account email address	Authentication, sending the sign-in link	Performance at your request (art. 6.1.b)	Until the account is deleted
Cookie consent choice	Proving and honouring your choice	Legal obligation (art. 82, French Data Protection Act)	6 months, then we ask again
Light/dark theme preference	Showing the site the way you asked for it	Strictly necessary to the requested service	Until you clear it
Audience measurement (Google Analytics 4)	Understanding which pages are useful	Consent (art. 6.1.a) — off by default	Per the GA4 configuration, 14 months maximum

We ask for no name, no postal address and no financial detail. We build no advertising profile and sell no data.

3. What we deliberately do not do

No third-party fonts. Typography is served from our own domain. The CNIL has ruled that embedding Google Fonts transfers the visitor's IP address to Google with no legal basis; we do not do it.
No third-party script before consent. The analytics tag is not merely "disabled": it is absent from the document until you accept. Refusing means it is never fetched.
No mandatory remote logos. Issuer logos, where they exist, come from the URL the issuer itself registered with the AMF.

4. Processors and transfers

Cloudflare, Inc. — content delivery. Edge processing, which may involve servers outside the European Union, covered by the European Commission's standard contractual clauses.
Supabase, Inc. — database and authentication. Data is stored in the eu-west-3 (Paris, France) region.
Google Ireland Ltd — audience measurement, only after your explicit consent.

5. Data about listed companies

The publications indexed here come from legal persons and are public by regulation; they are not personal data. Where a document names an individual — a director, a shareholder declaring a threshold crossing — that naming is in the official document published by the AMF, of which we host no copy. A request concerning such a document should be addressed to the AMF, which publishes it.

6. Your rights

You have the GDPR rights of access, rectification, erasure, restriction, objection and portability. Write to legal@noblablafinance.fr; we answer within one month. You may also lodge a complaint with the CNIL.

Consent to cookies can be withdrawn at any time through the Cookies link in the footer.