What we collect

• To open an account — your name, your e-mail address, a phone number if you give one, and your password.
• To run the service — the tickets you deposit (16-digit code, and the photo if you attach one), your balance, and the history of your deposits and transfers.
• To send money — the recipient's card number, expiry date and 3-digit code, when you send to a card. These are kept for the transfer and, if you tick the box, saved for your next transfers.
• To protect the service — the date and time of your actions, and the technical traces needed to detect abuse.
• Messages sent through the contact form — 180 days, then deleted. Card details — erased 90 days after a transfer is completed.

We never ask for your bank details, your identity papers or your address.

Why we keep it

• Check a deposit and top up your balance.
• Carry out and track a transfer you asked for.
• Answer you when you write to us.
• Detect fraud and keep the service available.

Nothing is used for advertising, and nothing is sold or rented. Ever.

How it is protected

• Passwords are stored encrypted: nobody, not even us, can read them back.
• Ticket photos are stored outside the public folder, under a random name. No link can open them; they are served only to the account that deposited them.
• Card codes are masked on screen and only shown when you ask for them.
• Only the last four digits of a card are displayed in lists.
• The site is served over HTTPS and the session cookie cannot be read by a script.

Who can see it

Your data is seen by the people who run the service, for the checks and the support. Two service providers process it on our behalf: the hosting company that runs the site and the database, and the e-mail provider that sends verification and password messages.

We do not share your data with anyone else, unless the law requires it.

How long we keep it

• Account data — as long as the account is open.
• Tickets and transfer history — as long as the account is open, so you can follow your transfers.
• Saved cards — until you remove them yourself, in one click, on the cards page.
• Verification and reset codes — a few minutes to one hour, then they expire.

When an account is closed, its data is deleted, apart from what must be kept to justify past transfers.

Your rights

You can ask for a copy of your data, have it corrected, or have your account and its data deleted. You can also object to a specific use.

Write from the contact page, using the e-mail address of your account. We answer by e-mail, and a deletion request is carried out once we are sure it comes from you.

Cookies

The site sets a single session cookie, with no advertising or statistics. Details are on the cookie notice.

Changes

If this notice changes, the date at the top is updated. A change that affects what we keep is announced on the site before it applies.