Privacy policy

This policy is a translation of the French version. In case of discrepancy, the French version prevails.

PixelBureau is not opening spaces yet: this site creates no account. It only receives the messages you write to us and the audience measurement described below. The sections about a team’s space describe the service as it will work when it opens.

Two different cases: this site, and your team’s PixelBureau space. For the latter, your employer or your team is the data controller and PixelBureau acts on its behalf.

Data controller

Simon Rubuano, sole proprietor (EI RUBUANO SIMON), 7 rue d’Epremesnil, 76600 Le Havre, France, contact@pixelbureau.io

Your team’s space

To work, the space processes your name, your email address, your role, your status, your place on the map, your messages and the files you share; for signing in, your password (hashed) if you set one, your two-factor settings, the Google or GitHub accounts you link, and your signed-in devices (browser, system, IP address, last activity). Call audio and video go directly between participants: they are neither recorded nor stored. Your microphone and camera only turn on when you’re talking to someone.

Guests

Someone invited from outside, with a guest link or a room’s meeting link, has no account: PixelBureau only keeps the name they enter, for the length of their visit. It is deleted at most five minutes after the link ends, when it expires or is revoked.

During their visit, a guest sees the names, statuses and positions of the people on the floor, but not their conversations: they only hear and see those of the room they are in. Members, for their part, see them in “Here”, under “Guests”.

Measuring how the service is used

To monitor and improve PixelBureau, the app counts, for each person and each day, their minutes of presence in a space and their number of calls. These are counters only: not the content of conversations, not who you talk to, not your position on the map. They are used by the publisher to run the service (legitimate interest), are never sold or shared, are kept for 25 months at most and are deleted with your account.

Cookies and analytics

The site only sets the cookies it needs to work: the session and form protection. Your appearance choice (light or dark) is kept in your browser; if you opt out of audience measurement below, a cookie remembers that choice. No advertising trackers, no social media trackers.

To know which pages are read and where visitors come from, the site’s public pages use Matomo, open-source software hosted by the publisher at o2switch, in France (analytics.rubuano.fr). It sets no cookies, masks the last two bytes of your IP address and only produces anonymous statistics (pages viewed, referring site, device type), reserved for the publisher, never combined with other data or shared. They are kept for 25 months at most. This audience measurement meets the conditions of the French data protection authority (CNIL) for exemption from consent: so there is no banner. Legal basis: legitimate interest. The app itself (your space) is not measured by Matomo.

You can opt out of this measurement; your browser’s “Do Not Track” setting is also respected.

Fonts and all other resources are served by PixelBureau itself: apart from this audience measurement, no request is made to any other service when pages load.

Server logs

The server keeps technical logs (IP address, date, page requested), needed for the security and proper operation of the service. They rely on legitimate interest and are not used for any analysis. To limit abuse, the number of requests sent from the same IP address is counted over one minute.

Payment

Payments go through Stripe (Stripe Payments Europe, Limited, Ireland), on its own pages, as a separate data controller. PixelBureau only receives the name, email address, billing address and payment status, never the full card number or IBAN.

Signing in with Google or GitHub

If you choose “Continue with Google” or “Continue with GitHub”, you identify yourself on their site, under their own privacy policy. PixelBureau only receives your name, your certified email address and an account identifier, to sign you in; never your Google or GitHub password. You can unlink these accounts at any time in “Settings › Account and security”.

Recipients

Your data is never sold, rented or transferred. It is only accessible to:

• the publisher of PixelBureau, to run the service and reply to you;
• the members of your space, for what is visible there (name, status, place on the map, messages);
• Hetzner Online GmbH, hosting provider, in Germany;
• Stripe, for payments, as described above;
• Google Ireland Limited (Google Workspace), Ireland: sending emails (sign-in links, replies, subscription information).

Matomo audience measurement is hosted by the publisher at o2switch, in France; it is not entrusted to any other third party. The application and its data are hosted in the European Union. Emails go through Google, which may process them outside the European Union, under the European Commission’s standard contractual clauses provided for in its terms.

How we communicate with you

By email only: sign-in links, creation of your space, invoices and information about your subscription (price or terms changes, failed payments). No newsletters or marketing messages without your consent. You can write to us at contact@pixelbureau.io.

Security

Encrypted connections (HTTPS, secure WebSocket, WebRTC for audio and video), sign-in by a signed link valid for 15 minutes and usable only once, optional passwords hashed and refused if they appear in a data leak, two-factor authentication and a check before sensitive actions, one closed space per team that only invited members can enter, restricted administrative access and security updates applied. The microphone and camera are truly off when they’re not in use.

Your rights

You have the right to access, rectify, erase, restrict, object and to data portability. Write to contact@pixelbureau.io; you will receive a reply within one month. For data in your team’s space, also contact its administrator.

If you disagree, you can lodge a complaint with the CNIL (the French data protection authority).