Privacy Policy

Last updated: April 2026

Data controller

Macaron Software is the controller of your personal data collected through the Popinz platform (popi.nz and its subdomains). Contact: notre formulaire RGPD

Data collected

• Account and institution: name, email address, school name, country — collected when creating your space.
• Pedagogical data: student names, groups, attendance, grades, evaluations — entered by teaching staff in the course of their work.
• Browsing data: IP address, browser, pages visited — collected via Umami Analytics (no cookies, no cross-site tracking).

Purposes of processing

• Providing and improving the Popinz service
• Managing your account and subscription
• Sending notifications related to your use (alerts, reminders)
• Anonymised audience measurement (Umami, cookie-free)

Legal basis

Processing is based on contract performance (T&Cs), your consent for marketing communications, and legitimate interest for security and service improvement.

Hosting & transfers

All data is hosted on OVHcloud servers in France. No data transfer outside the European Union.

Retention periods

• Account data: duration of subscription + 3 years after termination
• Pedagogical data: according to your institution's policy (configured in Popinz)
• Technical logs: 90 days

Your rights (GDPR)

You have the right of access, rectification, erasure, portability and objection. Exercise them by writing to notre formulaire RGPD. You may also contact your national data protection authority.

Cookies

Popinz uses only strictly necessary technical cookies (session, CSRF, display preferences). No advertising cookies. Umami analytics is cookie-free and GDPR-compliant.

Security

TLS encryption, data encrypted at rest, anti-fraud audit blockchain, daily encrypted backups, role-based access control (RBAC).