Louk.it complies with the General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679.

1. Data controller

The data controller for personal data is Louk.it, accessible at louk.it.

For any question regarding the protection of your data: privacy@louk.it

2. Data collected

Category Data Source
Identification Name, first name, email, profile photo Registration / Profile
Login Hashed password, authentication tokens Login
Content Links, bio, images, products, events Your activity
Payment Billing information (via Stripe) Pro subscription
Analytics Clicks, page views, device data Service usage
Technical IP address, browser, access logs Automatic

We never collect sensitive data (racial origin, health, political opinions, etc.).

3. Purposes and legal bases

  • Service provision — contract performance (Art. 6.1.b GDPR)
  • Payment management — legal obligations and contract performance
  • Analytics and improvement — legitimate interest (Art. 6.1.f GDPR)
  • Security — legitimate interest (fraud prevention)
  • Communication — consent (marketing emails, if accepted)

4. Retention period

  • Active account: data kept for the duration of the account
  • After account deletion: 30 days then permanent deletion
  • Billing data: 10 years (French legal obligation)
  • Security logs: 12 months

5. Data sharing

We never sell your personal data. We only share it with:

  • Stripe — payments and billing (politique : stripe.com/fr/privacy)
  • Hosting provider — server infrastructure (data stored in the EU)
  • Technical service providers — only if necessary for the service, bound by a GDPR-compliant DPA

In case of legal obligation (judicial requisition, etc.), we may be required to disclose your data to the competent authorities.

6. Cookies

Necessary cookies (session, the form security token, language) are always set. The referral cookie and the measurement cookie are set only after an explicit choice on the banner or the Cookies page. No third-party advertising cookie (no gtag, Plausible, or Matomo) is used.

  • Session cookie — keeping you signed in, including the CSRF token it holds (duration: session). Always on.
  • Language cookie — remembering your preferred language (1 year). Always on.
  • Referral cookie — a ?ref= code for 30 days, only if you accept it.
  • Measurement cookie — an id for views, likes, and Discover for 1 year, only if you accept it.
  • Cookies

Accept and Refuse carry the same weight. The choice is kept for 6 months and can be changed on the Cookies page.

7. Your rights

In accordance with the GDPR, you have the following rights:

Right of access

Obtain a copy of your personal data

Right of rectification

Correct inaccurate or incomplete data

Right to erasure

Request the deletion of your data ("right to be forgotten")

Portability

Export your data in a structured format

Right to restriction

Restrict the processing of your data

Right to object

Object to processing based on legitimate interest

To export your data: Dashboard → Settings → Export my data.
For any other request: privacy@louk.it. We respond within a maximum of 30 days.

If your complaint remains unresolved, you may contact the CNIL (Commission Nationale de l'Informatique et des Libertés).

8. Contact us

For any question regarding this privacy policy or your personal data: