Privacy Policy

Last updated: February 2026

Our Commitment

In short: tuls.me is built with privacy as a founding principle. Most tools run entirely in your browser — your files never leave your machine.

We believe your data belongs to you. That's why tuls.me is designed to minimize data collection and maximize local processing (in your browser).

The data controller is Alexis Laporte, sole proprietor — see legal notice.

What We Don't Collect

In short: No ad tracking, no fingerprinting, no uploading your files to our servers.

  • Your files: Images in the Screenshot Editor, generated signatures, favicons — everything stays in your browser.
  • Ad cookies: No third-party tracking cookies. No Google Analytics, no Facebook Pixel.
  • Fingerprinting: We don't use any browser fingerprinting techniques.
  • Data selling: Your data is never sold, traded, or shared for commercial purposes.

What We Collect

In short: If you create an account (optional), we store your OAuth profile and saved content. Analytics are anonymous (Plausible, no cookies).

With an account (optional)

DataPurposeLegal basis
Name, avatar (GitHub/Google)Profile displayContract
EmailIdentification, supportContract
Exports, RACI matricesSaving your creationsContract
Credits balanceAI service billingContract

Without an account

DataPurposeLegal basis
Pages visited (anonymous)Usage statisticsLegitimate interest
Contact formResponding to your messageConsent

Local storage (localStorage, sessionStorage) is used by some tools to save your work in progress. This data stays exclusively on your device.

Cookies

In short: Only three cookies: one for your session (if logged in), one for your consent choice, and one for your language preference. No third-party tracking cookies.

CookiePurposeDurationType
tokenAuthentication (JWT)30 daysEssential
cookie_consentYour consent choice1 yearEssential
langLanguage preference1 yearEssential

We don't use any advertising or third-party tracking cookies. Analytics are provided by Plausible, an open-source tool that sets no cookies and collects no personal data.

Third-Party Services

In short: We use a few third-party services for authentication, email, and AI. All are established services with their own privacy policies.

GitHub / Google
OAuth authentication
Plausible
Anonymous analytics (self-hosted)
Resend
Email delivery (contact form)
Google Gemini
AI image generation (Branded Photo)
INSEE / Entreprises
Public company data
Scaleway
Hosting (France)

Your Rights (GDPR)

In short: You have full control over your data. Access, rectification, deletion — all possible, directly or on request.

Access

Get a copy of your data

Rectification

Correct inaccurate data

Deletion

Via Account page or on request

Portability

Get your data in a standard format

Objection

Object to processing

Complaint

To the CNIL (French data authority)

To exercise your rights: contact form. We respond within 30 days.

This site uses cookies to improve your experience. Learn more