Legal notice.
In accordance with Article 6 of the French Confidence in the Digital Economy Act (LCEN) and the General Data Protection Regulation (GDPR).
Site publisher.
The site trust.gr33t.fr is published by:
- Legal name
- Gr33t — Société par actions simplifiée (SAS)
- Share capital
- €11,248
- Registration
- 933 106 056 R.C.S. Paris (incorporated 20/09/2024)
- SIREN
- 933 106 056
- VAT number
- FR30933106056
- Registered office
- 64 rue des Archives, 75003 Paris, France
- Contact
- contact@gr33t.fr
- Publication director
- Arnaud Rayrole
Hosting.
The site is hosted on the Cloudflare Pages infrastructure:
- Host
- Cloudflare, Inc.
- Address
- 101 Townsend Street, San Francisco, CA 94107, United States
- Website
- www.cloudflare.com
The site is served via Cloudflare's global network. Some processing operations (function execution, audit metadata) may transit through datacenters located in the European Union and in the United States. Transfers outside the EU are governed by the European Commission's Standard Contractual Clauses and by Cloudflare's certification under the EU–U.S. Data Privacy Framework. Cloudflare's DPA is available at cloudflare.com/cloudflare-customer-dpa.
Intellectual property.
All content is protected.
The general structure, text, logos, illustrations and any other element making up the site trust.gr33t.fr are the exclusive property of Gr33t or are used with authorization.
Any reproduction, representation, modification, publication or adaptation of all or part of the site's elements, by any means whatsoever, is prohibited without prior written authorization from Gr33t. The Gr33t trademark and logo are trademarks owned by the publisher.
© 2026 Gr33t — All rights reserved.
Personal data.
In accordance with the GDPR and the French Data Protection Act.
Data controller
Gr33t (contact details in section 1). Any request relating to your data can be sent to contact@gr33t.fr.
Data collected and purposes
The Trust Center collects only the data strictly necessary for its operation:
SSO authentication — when signing in via Microsoft 365 or Google Workspace, we receive your professional email address, your name, and your organization identifier. Legal basis: legitimate interest (access control to client content). No password is stored.
Connection audit log — every sign-in attempt (success, denial, sign-out) is recorded with the date, email address, domain, identity provider, IP address, and user-agent. Legal basis: legitimate interest (security, anomaly detection).
Client domain allowlist — we maintain a list of email domains authorized to access the client area. Legal basis: performance of the service contract.
Retention period
Audit logs are retained for 90 rolling days, a duration suited to incident detection and aligned with CNIL recommendations. Active sessions expire automatically after 7 days.
Sub-processors
The data we process is entrusted to the following sub-processors:
Cloudflare, Inc. (United States) — hosting, serverless
execution, logging. Transfers governed by the Standard Contractual Clauses and
the EU–U.S. Data Privacy Framework.
Microsoft Corporation (United States) — OAuth identity provider
for Microsoft 365 accounts. Transfers governed by the Standard Contractual
Clauses and the EU–U.S. Data Privacy Framework.
Google LLC (United States) — OAuth identity provider for
Google Workspace accounts. Transfers governed by the Standard Contractual
Clauses and the EU–U.S. Data Privacy Framework.
Your rights
You have the right to access, rectify, erase, restrict, object to, and port your data. To exercise these rights: contact@gr33t.fr. You may also lodge a complaint with the French data protection authority, the CNIL (cnil.fr).
Cookies.
No analytics or marketing cookies.
The Trust Center uses only strictly necessary cookies required for the service to operate:
tc_session — signed authentication cookie (HMAC), 7-day
duration, HttpOnly, SameSite=Lax. Keeps your session active without requiring
you to sign in again on every visit.
tc_flow — short-lived technical cookie (10 minutes maximum)
used during the OAuth flow to prevent CSRF attacks.
tc_lang — stores your preferred language (FR or EN), 1-year
duration. Set when you click the language switcher.
These cookies are exempt from prior consent in accordance with the CNIL recommendation of September 17, 2020. No data is shared with third parties for advertising or statistical purposes.
Applicable law.
French jurisdiction.
This site and this legal notice are governed by French law. In the event of a dispute, and failing an amicable agreement, the courts of Paris shall have jurisdiction.