Privacy policy

Last updated: October 2026

We believe privacy is a right, so we collect as little as possible. This policy explains exactly what this site processes, in line with the GDPR.

1. Who is responsible

CryptEU, a non-profit collective of volunteers (see the legal notice). Contact: crypteu@nextstars.net.

2. What we collect

• Account data: name, email address, password (stored only as a salted hash), role, verification status, two-step sign-in preference and creation date.
• Session data: a random session identifier in a cookie; only its hash is stored on our side.
• Messages: what you send through the contact form.
• Forge: your chosen public handle, display name, bio, project content and issues; private submission drafts, moderation feedback, favorites, reports and moderation decisions.
• IP address: held in memory only, for rate limiting and abuse prevention. We do not log it to disk.

No analytics, no advertising, no third-party trackers, no profiling.

3. Why, and on what basis

• Running your account and verifying your email (necessary to provide the service you asked for).
• Protecting the service against abuse and intrusion (legitimate interest).
• Answering your messages (legitimate interest).
• Sending messages to members about the collective and its tools (legitimate interest).

4. Who receives it

Administrators access account data and Forge submissions, reports and moderation history. Approved Forge profiles, projects, source files and issues are publicly accessible. Your email and private account name are never included in a public Forge profile. Favorites and reports are private; only aggregate star counts are public. Mailjet, our email relay, processes your address and message content to deliver email. We never sell or trade personal data.

5. Retention

Account data is kept until you ask for deletion. Verification tokens and sign-in codes expire automatically. Contact messages are kept only as long as needed to handle them. Forge submissions and moderation records are retained while needed to operate the community and prevent abuse; contact us for access, export or deletion. Deleting an account removes its Forge content from public access. Public content may have been copied by third parties.

6. Your rights

You may access, correct, delete, restrict or export your data, and object to its processing. Write to crypteu@nextstars.net. You may also complain to your national data protection authority.

7. Security

Passwords are hashed, sessions use HTTP-only cookies, access is role-based and two-step sign-in is available. No system is perfectly secure; if you find a flaw, please tell us.