Privacy policy

This English translation is provided for information only; only the French version is legally binding.

What Jitnote records when you create an account, why, who sees it, and how to delete everything. Version of [TO BE COMPLETED: date].

Data controller

Flavien Brun, sole proprietor (entrepreneur individuel, EI), trading as OnePhoto, 3505 CD 10, 13100 Saint-Marc-Jaumegarde, France, SIREN 510 993 546. Contact: contact@jitnote.com.

Without an account

Browsing the atlas sets no cookies and uses no audience measurement tool. Videos are loaded from YouTube (Google) only when you click the play button; YouTube’s own privacy policy then applies. If you install Jitnote on your phone, a copy of the atlas is kept on the device so it works offline.

What is recorded with an account

• Full profile (age 15 and over): e-mail address, username, password (stored as an encrypted hash, never readable), belt and club if you provide them. With “Continue with Google”: your e-mail address and the technical identifier of your Google account (no password, no contacts).
• Anonymous account: an automatically assigned identifier and the encrypted password. No e-mail, no name.
• For everyone: your level for each technique (0 to 4), your training dates and their remarks, your notes, your belt promotions, links to your competition profiles (Smoothcomp, BJJ Metrics…) if you add them, your partners, classes and teams, your nickname and avatar, the dates of account creation and last visit.
• Subscription: your plan (free, Pro, complimentary access), its end date, the customer identifier and subscription identifier assigned by Stripe, and the history of changes (payment, cancellation, code used). Jitnote never receives your card number.
• Coaches: the club and rank given in the coach status request, comments and class sessions.
• Security: a non-reversible hash of your IP address during login, sign-up or payment attempts, deleted after 24 hours.

Optional: your gender (female, male or not specified) and your country, if you enter them in your profile. They are only used to choose your automatic avatar, to word texts correctly and to show the flag on your fighter card, visible to the same people as your avatar.

Why, and on what legal basis

• Providing the service you request (training log, partners, teams, Jitnote Pro): performance of a contract (article 6.1.b of the GDPR).
• Protecting the site against attacks: legitimate interest (article 6.1.f).
• Keeping records of payments: legal accounting obligation (article 6.1.c).

No advertising, no sale of data, no audience measurement.

Who sees what

• Your notes are visible only to you.
• Your levels are visible to the members whose follow request you have accepted, to your team members and to the coaches whose class you have joined. You can remove any of them at any time.
• Your belts and competition profiles are visible to your coaches and accepted partners. These external profiles often show your name: only add them if you agree to this.
• Your username and your belt appear in the partner search if you leave this option enabled. An anonymous account never appears anywhere.
• The overall team ranking only shows team names and their totals.
• The Jitnote administrator sees the list of accounts (username, e-mail, plan, dates, number of tracked techniques, coach status) to manage the service and subscriptions. The administrator does not see your notes.

Service providers

• o2switch (Clermont-Ferrand, France): hosting of the site and the database.
• Stripe (Stripe Payments Europe, Limited, Ireland): payment and invoicing for Jitnote Pro, only if you upgrade to Pro. Stripe may transfer some data outside the European Union with the safeguards provided for by the GDPR; see its privacy policy on stripe.com.
• Google: only if you use “Continue with Google”, and for YouTube videos played on click.

Age

The full profile is reserved for people aged 15 and over. Under 15, only the anonymous account, with no e-mail or name and invisible to other members, is offered, with a parent’s consent.

How long

Your data is kept for as long as your account exists. A free account with no visit for 3 years is deleted automatically. A new password request expires after one hour. Payment records are kept for 10 years (accounting obligations), by Stripe and in the subscription history.

Cookie

No cookie is set when pages are opened. When you log in, a single session cookie (“jn”) keeps you logged in for 30 days at most; it is necessary for the account to work. The Google button and the Stripe payment page set their own cookies, only if you use them. If you choose a language, a “jnlang” cookie remembers that choice for one year, so you are no longer redirected based on your browser language.

Your rights

• Access and portability: “Download my data” button in My account.
• Rectification: edit your profile in My account.
• Erasure: “Delete my account” button in My account. Profile, levels, notes and links are erased immediately; any ongoing subscription is cancelled.
• Objection, restriction or questions: contact@jitnote.com. In the event of disagreement, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr).

Security

The site is served over HTTPS only. Passwords are stored as an encrypted hash (bcrypt) and cannot be read back, not even by the administrator. Repeated login attempts are blocked. The database is stored outside the site’s public folder.