Privacy Policy

1. Introduction

Sublim Analytics ("Sublim", "we", "us") is committed to protecting your privacy and the privacy of your website visitors. This Privacy Policy explains how we collect, use, store, and protect personal data when you use our web analytics service. Sublim is operated by Sublim SAS, a company registered in France.

2. Data Controller

Sublim SAS acts as a data processor on behalf of our customers (the data controllers) for analytics data collected on their websites. For data related to your Sublim account (email, billing information), Sublim SAS acts as the data controller. You can reach our Data Protection Officer at privacy@sublimanalytics.com.

3. Data We Collect About You

4. What We Do NOT Collect

• IP addresses are never stored or logged.
• No third-party cookies are placed.
• No cross-site or cross-device tracking is performed.
• No personal identifiers (fingerprints, advertising IDs) are collected.
• No data is shared with or sold to third parties.

5. Cookies

The Sublim dashboard (sublimanalytics.com) uses only strictly necessary cookies for authentication and session management. Our analytics tracking script installed on your websites does not place any cookies on your visitors' devices. No advertising, marketing, or third-party cookies are used anywhere in our service.

6. Data Hosting and Transfers

All data is hosted exclusively in the European Union (Scaleway, France). We do not transfer any data outside of the EU. Our infrastructure is located in France, ensuring full compliance with GDPR data residency requirements.

7. Sub-processors

We use a limited number of sub-processors, all located within the European Union:

• Scaleway (France) — Infrastructure hosting
• Stripe (EU) — Payment processing
• Brevo (France) — Transactional emails

8. Data Retention

Analytics data is retained for the duration of your active subscription. Upon cancellation, your data is kept for 90 days to allow reactivation, after which it is permanently and irreversibly deleted. Account data is deleted within 30 days of account closure.

9. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — obtain a copy of your personal data.
• Right to rectification — correct inaccurate or incomplete data.
• Right to erasure — request deletion of your data.
• Right to restriction — limit how we process your data.
• Right to data portability — receive your data in a structured format.
• Right to object — object to processing based on legitimate interests.

10. Exercising Your Rights

You can exercise most of these rights directly from your account settings. For any other request, contact us at privacy@sublimanalytics.com. We will respond within 30 days. If you believe your rights have not been respected, you have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés), the French data protection authority.

11. Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, regular security audits, and monitoring. Our infrastructure follows industry best practices for data protection.

12. Children's Privacy

Our service is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on our website. Continued use of the service after changes constitutes acceptance of the updated policy.

14. Contact

For any questions about this Privacy Policy or our data practices, contact us at privacy@sublimanalytics.com.