Privacy and cookies

Last updated: 27 October 2026

This page explains what data 75tools processes, why, for how long, and how to exercise your rights under the General Data Protection Regulation (GDPR). The French version, confidentialité et cookies, is the reference text.

1. Data controller

The publisher of 75tools.fr, Radif Partners. Contact: contact@75tools.fr.

2. Data processed

Files opened in the tools. PDFs, images and text you open in a tool (compress a PDF, convert an image, count words…) are processed by your browser and are never sent to us. Invoices, quotes, letters and certificates you fill in also stay on your device.

MyCard account. At sign-up: email address and password (stored in encrypted form by our authentication provider). For your card: username, first and last name, job title, company, description, photo, contact details and links you choose to display. This information is public on your card page, since that is its purpose.

Card statistics. When someone views a card or clicks one of its links, we record the type of action, the date, the browser used and the referring page. The card holder sees the number of views and clicks, never the identity of visitors.

GymSquad schedule. The first name you choose and the slots you book, visible to other members of the group.

Audience measurement with Google Analytics. The site uses Google Analytics 4 to count visits and see which pages are useful: pages viewed, referring page, visit length, device and browser type, approximate country and city. Google Analytics sets two cookies on your device, described in section 3. The IP address is anonymised: Google Analytics 4 neither records nor stores it and only uses it at collection time to infer an approximate country and city. The page address sent is stripped of its parameters. No data from your account or card is sent to it. The site shows no advertising: ad storage, ad data, ad personalisation and Google signals are switched off. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, processor within the meaning of article 28 GDPR.

Stability measurement with Microsoft Clarity, without cookies. To find errors, slow pages and buttons that do not respond, the site uses Microsoft Clarity in cookieless mode: Clarity sets no cookie, each page view gets a separate identifier, and page text and your input are masked. Clarity receives the page structure, clicks, scrolling, device type, loading times and errors.

3. Cookies and browser storage

Google Analytics sets the cookies _ga, which tells visitors apart with a random identifier, and _ga_LNTVCQ9NEV, which keeps the state of the visit. Their lifetime is set to 13 months at most (390 days) and is not extended on each visit; Google’s default is 2 years. These are the site’s only measurement cookies: no advertising or social network cookies.
Microsoft Clarity runs in cookieless mode and stores nothing on your device.
Login session: your login token is kept in the browser’s local storage while you stay signed in.
Preferences: the first name chosen in GymSquad stays in your browser.

To object to audience measurement without writing to us: block or delete cookies in your browser settings, or install the Google Analytics opt-out add-on. For stability measurement: block the clarity.ms domain in your browser or with a content blocker. The site remains fully usable.

4. Purposes and legal bases

Creating and displaying your card, signing you in: performance of the service you request.
Card statistics, audience measurement (Google Analytics) and stability measurement (Clarity): the publisher’s legitimate interest in understanding and improving the site (art. 6(1)(f) GDPR).
Security and technical operation: legitimate interest.

5. Recipients and providers

Supabase: database, authentication and photo storage.
GitHub Pages (GitHub, Inc., Microsoft group): hosting, technical connection data.
Microsoft Clarity (Microsoft Ireland Operations Limited): stability measurement described above.
Google Analytics (Google Ireland Limited, processor within the meaning of article 28 GDPR): audience measurement described above.
Google Fonts: font loading, which sends your IP address to Google.

No data is sold or used for advertising, and measurement data is shared with no advertiser.

6. Transfers outside the European Union

Microsoft, GitHub and Google may process this data in the United States; these companies are certified under the EU–U.S. Data Privacy Framework. Google Analytics data may be transferred to Google LLC in the United States under the EU–U.S. Data Privacy Framework and the European Commission’s standard contractual clauses. Supabase relies on standard contractual clauses.

7. Retention periods

Account and card: until the account is deleted.
Card statistics: as long as the card exists.
Clarity: session recordings thirty days, aggregated data thirteen months at most.
Google Analytics: 14 months at Google for data linked to visits and identifiers, then deletion; only anonymous totals remain. Cookies _ga and _ga_LNTVCQ9NEV: 13 months at most.
Emails exchanged with us: twelve months after the last exchange.

8. Your rights

You can ask for access to your data, its rectification, erasure (including full deletion of your account), portability, restriction of processing, or object to it, by writing to contact@75tools.fr. We reply within thirty days.

If you believe your rights are not respected, you can complain to the CNIL, the French data protection authority: www.cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.