Your data, your rights

Who is responsible

CyberShield Dev Solutions (cybersds.fr) publishes Comptwar and answers for the platform's processing. Contact: contact@cybersds.fr.

Each shop is responsible for the data of its customers and orders. Comptwar processes it on the shop's behalf, as a technical provider.

What we collect, and why

If you order from a shop: your name, your e-mail address, your phone number, the delivery address (or the pickup you chose) and the content of the order. Sole purpose: letting the shop prepare, deliver and track your order, and sending you the follow-up e-mails.

If you create a customer account: your e-mail address, your name if you give it, your password (stored as an irreversible hash, never readable), and your phone number and addresses if you save them. Sole purpose: finding your orders and ordering faster. An account is valid for one shop only.

If you run a shop: your name, your e-mail address and the shop's details, including the bank details shown for transfers. Sole purpose: running the shop and calculating the platform commission.

If you visit a storefront: your IP address is used to limit abuse (too many sign-in attempts, bulk submissions) and appears in the server's technical logs, used for security only.

Nothing else, no resale, no advertising.

How long

Orders are kept for as long as the shop's accounting obligations require, 10 years at most. A customer account is kept until you ask for it to be deleted. A sign-in session lasts 30 days, a new-password link one hour, an address confirmation link three days. Technical logs are kept for a limited time, as long as security requires.

Your rights (GDPR)

Access, rectification, erasure, objection and portability: write to contact@cybersds.fr, or to the shop directly about an order. We answer within 30 days. You may also lodge a complaint with the supervisory authority of your country (in Benin: the APDP; in France: the CNIL; in Romania: the ANSPDCP).

Where the data goes

Data is hosted by Hostinger International Ltd (Cyprus, EU), on a virtual private server administered by the publisher. Each shop receives the data of its own orders and customers, and only that.

Follow-up e-mails (orders, accounts) go out through an e-mail delivery provider bound by contract, which uses them only to deliver them. Shop accounts sign in with Firebase Authentication (Google, USA), bound by standard contractual clauses for transfers outside the EU. Storefront fonts are loaded from Google Fonts (Google, USA), which then receives your IP address. Technical errors are reported to Sentry (Functional Software Inc., USA), bound by standard contractual clauses, without passwords, cookies or form contents.

Storefronts set technical cookies only: cw_session (customer account session, only if you sign in), cw_lang (chosen language), cw_age (age confirmation on adults-only shops). The cart stays in your browser. No tracking cookie, no third-party analytics.