Privacy & legal notice

• We collect only what’s needed to run your account: your email address and the criteria sets and evaluations you create.
• Your Anthropic API key stays in your browser. It is sent with each evaluation and never stored or logged on our servers.
• No advertising, no analytics, no tracking, and we never sell or share your data for marketing.
• You can ask us at any time to see, correct, export or delete your data.

EthiScore is a personal, non-commercial project run by Jérémie O'BRIEN, an individual based in France, who is the data controller for the personal data described here.

Privacy questions and requests: privacy@advitam.dev. General contact: hello@advitam.dev.

Your email address, to create your account and send you sign-in links. We email you only when you ask for a sign-in link: no newsletters or marketing.

Your criteria sets and evaluations (company names, criteria, scores, explanations and sources), so you can find them again. They are private to your account: other users cannot see them.

Technical data such as IP addresses, browser type and sign-in times, which our hosting, sign-in and email providers record in their logs for security and to keep the service running.

Legal basis: providing the service you signed up for (GDPR art. 6(1)(b)), and our legitimate interest in keeping the service secure and free of abuse (art. 6(1)(f)) for technical logs and bot protection.

Evaluations run on your own Anthropic account. Your key is kept in your browser’s storage: for the current tab only, or on this device if you tick “remember on this device”. It is sent over an encrypted connection with each evaluation, passed to Anthropic for that request, and never stored or logged by us. You can remove it at any time with “Change or forget key”.

When you run an evaluation, the company name and your criteria are sent to Anthropic using your key, under your own agreement with Anthropic. Its handling of that data is governed by Anthropic’s terms and privacy policy, not ours.

We use only what’s strictly necessary for the site to work, so no consent banner is required:

• Sign-in cookies, which keep you signed in.
• Browser storage for your API key (see above) and for an unfinished evaluation form, so it survives moving between pages.
• Cloudflare Turnstile, which checks that sign-in requests come from a person rather than a bot.

We rely on these providers to run EthiScore:

• Supabase: database and sign-in. Data stored in Ireland (EU).
• Vercel: website hosting.
• Amazon Web Services (Amazon SES): sending sign-in emails, from Sweden (EU).
• Cloudflare: domain name, email forwarding and bot protection.

Some of these companies are based in the United States and may access data from there. Such transfers rely on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

Your account and its data are kept until you ask us to delete them. We act on deletion requests within 30 days. Providers’ technical logs are kept for the short periods set by each provider.

You can ask to access, correct, export or delete your data, or object to or restrict how it is used, by writing to privacy@advitam.dev. We reply within one month.

If you believe your data is being mishandled, you can complain to the French data-protection authority, the CNIL (cnil.fr), or to the authority in your own EU country.

EthiScore is not intended for anyone under 15.

If this policy changes, we update this page and the date at the top. For significant changes, we will tell you by email.

Publisher: Jérémie O'BRIEN, individual, France. Contact: hello@advitam.dev.

Host: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, United States (vercel.com).