Privacy policy

The data controller is Arthur Goullet de Rugy, an individual running this site as a personal, non-commercial project. For any question or request about your data, write to arthur.goullet-de-rugy@epita.fr.

Without an account. The pot-odds calculator on /poker works without signing in and stores nothing on the server. The rake preset you pick is kept in your browser's local storage and never leaves your device.

Your account. Signing in uses Google. The site receives the identity Google shares at sign-in — your name, email address, profile picture and Google account identifier — and keeps a session in cookies that are strictly necessary for you to stay signed in.

What you enter in the tools. Everything you create is stored in your account: agenda tasks, categories, the slots you plan them in, weeks and objectives; maths progress, exercise results and review history; job applications, companies, notes, saved copies of job offers and interviews; live poker sessions, hands, players and notes; poker spots and trainers.

Google Calendar (optional). Only if you connect it from the agenda settings, in a separate consent from sign-in:

• Read-only access to your calendars (calendar.readonly): the list of your calendars and their events (title, times, all-day flag, availability and your response status) is mirrored so your commitments appear on the agenda grid. Your existing calendars are never modified.
• Calendars created by the app (calendar.app.created): if you turn on pushing, the site creates an “Agenda” calendar in your Google account and writes the tasks you plan to it. It can write to that calendar only.

The Google access tokens are stored encrypted (Supabase Vault) and are used only by the server functions that synchronise calendars; they never reach the browser.

Connected apps (optional). If you authorise an app such as Claude to access your account, it receives a token that lets it read and edit your data in the tools it was granted (agenda, jobs, live poker). You can see and revoke these grants in the agenda settings. Data the app reads is then also handled under that app's own privacy policy.

Notifications (optional). If you turn on reminders on a device, the site stores that device's push subscription (an endpoint address and encryption keys) and a record of which reminders were sent.

Job-offer links. When you add a link to an application, the server downloads that public page once to save a copy of the offer. The request comes from the server, not from your browser.

Technical data. Vercel Web Analytics and Speed Insights measure page views and loading performance in aggregate, without cookies and without identifying you. The hosting providers keep standard server logs (such as IP address and request time) for security and operation.

• Providing the tools you use — your account and everything you enter: necessary to provide the service you asked for (GDPR art. 6(1)(b)).
• Google Calendar, connected apps and notifications: your consent (art. 6(1)(a)), which you can withdraw at any time by disconnecting or turning them off.
• Security, backups and aggregate statistics: the legitimate interest of keeping the site working, safe and recoverable (art. 6(1)(f)).

Your data is never sold, never used for advertising, and never used to build a profile of you for anyone else.

aderugy.fr's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google data is used only to show your calendars on your own agenda and to write your planned tasks to the calendar the app created. It is not transferred to anyone except as needed to provide that feature, not used for advertising, not read by a human unless you ask for help with your account or the law requires it, and not used to train AI models.

The site relies on a few service providers, each acting on its behalf:

• Supabase — database, authentication and server functions, hosted in the European Union (Ireland).
• Vercel — website hosting and aggregate analytics. Vercel may process requests outside the EU; such transfers rely on the European Commission's standard contractual clauses or the EU–US Data Privacy Framework.
• Google — sign-in, and Google Calendar if you connect it. Database backups are also stored in the site owner's Google Drive.
• Your browser's push service (for example Google, Apple or Mozilla) — delivers notifications if you turn them on. The content is encrypted end to end.
• jsDelivr — serves the Python runtime when you run code in a maths exercise; your browser downloads it directly.

Some tools let you write about other people — poker players you met at a table, contacts at a company. You are responsible for that information: keep it factual, limited to what you need, and respectful of their privacy. A person you wrote about can contact the site owner to have it removed.

• Your account and content: for as long as you keep your account.
• Google Calendar data: while the connection is active. Disconnecting stops all synchronisation and deletes the “Agenda” calendar from Google.
• Push subscriptions: until you turn reminders off on that device or it expires.
• Backups: the 30 most recent are kept; older ones are deleted, so deleted data disappears from backups after they rotate.

To delete your account and everything in it, write to arthur.goullet-de-rugy@epita.fr. It is done within 30 days.

Every connection is encrypted (HTTPS). In the database, each row is tied to its owner and protected by row-level security, so one account cannot read another's data. Secrets such as Google tokens are kept encrypted and are only reachable by the server functions that need them.

Under the GDPR and the French Data Protection Act you can access your data, correct it, have it deleted, receive it in a portable format, restrict or object to its processing, withdraw your consent at any time, and give instructions about what happens to it after your death. Write to arthur.goullet-de-rugy@epita.fr; you will get an answer within one month.

If you think your rights are not respected, you can complain to the CNIL (cnil.fr) or to your own country's data protection authority.

The tools are not meant for anyone under 15, and no account should be created for them.

If this policy changes, the date at the top changes with it; significant changes are announced on the site. See also the terms of use.