Privacy policy

Last updated: 31 October 2026

This page is a translation of the French version, which prevails if the two differ.

In short: MiniLog keeps the minimum it needs to work. No ads, no trackers, nothing is sold. You can delete everything from your profile, whenever you like.

Who looks after your data

MiniLog is a personal project, free and ad-free, run by a private individual in France, not as a business. Data controller: the publisher of MiniLog, reachable at contact@minilog.app.

What MiniLog stores

Your account: your email, your username, your password (never in plain text, only a bcrypt hash), your language, your plan (free or premium) and a few dates (account created, email confirmed, terms accepted).
Your hobby: armies, units, miniatures, sessions, notes, time spent, purchases (date, shop, price), challenges, recipe links, friends, likes and comments.
Your photos, if you add any.
Notifications, if you turn them on: the technical address your browser provides to receive them, and your preferences.
Links sent by email (confirmation, forgotten password): only a hash.
Technical data: your IP address is used to block abuse (too many login attempts, for example) and appears in the host's technical logs.

No payment data (nothing is paid), no location, no ads, no analytics.

Why

To provide the service you ask for when you create your account: your account, collection, photos, friends, confirmation and password emails. Legal basis: performance of the contract (the terms of use).
To protect the service and its users: abuse limits, technical logs, backups, handling reports. Legal basis: the legitimate interest in keeping MiniLog safe and running.
Notifications: only if you turn them on. You can turn them off at any time.

Your data is never used for ads, never sold, never shared for anything else.

Who sees what

Your friends (the ones you accepted) see your profile, your finished sessions and their photos, and can like and comment.
Challenge participants see your progress in that challenge.
Someone who knows your exact username can send you a friend request. There is no directory and no search.
Your email, password and purchases are shown to no one.

Service providers

Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA): hosts the app, the database, the photos and this site, and forwards emails sent to contact@minilog.app.
Resend (USA): sends the app's emails (confirmation, forgotten password).
Your browser's push service (Google, Apple, Mozilla…), only if you turn notifications on: it carries encrypted notifications.
Messages sent to contact@minilog.app land in the operator's personal mailbox (Gmail, Google).

These are US companies: your data may be processed outside the European Union. These transfers rely on the safeguards required by the GDPR in their data processing terms (European Commission standard contractual clauses or the EU-US Data Privacy Framework).

How long

Your account and everything in it: until you delete it. Deleting it, from your profile, erases everything right away, photos included.
Links sent by email: erased at most one day after use or expiry.
Technical logs: a few days.
Backups: a copy of the database is kept for up to 90 days in private storage. Deleted data can therefore stay there for up to 90 days before it is gone for good.
Emails exchanged with contact@: as long as needed to handle your request. If an account is deleted for breaking the rules, a short note (date, reason) is kept for one year at most.

Cookies and storage

No advertising or analytics cookies. The app only keeps what it needs to work: a login cookie (to stay logged in), a cookie that remembers your language and, in your browser, changes made offline while waiting for the network. These are strictly necessary for the service you ask for, which is why there is no cookie banner. This site (www.minilog.app) sets none.

Your rights

You can access your data, correct it, erase it, get a copy in a file (portability), object to a processing or ask for it to be restricted.

Delete your account: in your profile, Account section, at any time.
Anything else (copy of your data, a correction, a question): write to contact@minilog.app from your account's address. Answer within one month at most.
If you think your rights are not respected, you can complain to the French data protection authority, the CNIL (or the one in your country).

Under 15

MiniLog is made for painting as a family too. If you are under 15, ask one of your parents before creating your account: in France that's the rule at your age, and it's good for them to know what you use. A parent can write to contact@minilog.app with any question or to have their child's account deleted.

Security

Passwords stored as hashes (bcrypt), encrypted connections (HTTPS), photos in private storage, visible only to you and the people the app shows them to. If a data breach put you at risk, you would be told.

Changes

If this page changes in an important way, you will be told in the app or by email.