Browsing Ethica sets no cookies. We run no advertising trackers or ad pixels and sell no data. For anonymous, aggregated audience statistics we use Plausible Analytics — cookieless, storing no personal data and unable to identify you individually. Technical server logs (IP addresses, requested pages) exist only for security and operations, and are not cross-referenced with anything else.
Creating an account is optional (browsing works without one). If you do, we store your email address and a password hash (never plaintext). The email is used to verify the account, reset passwords, and alert you to grade changes for brands you follow. You can export and delete all your data from your account page.
When something goes wrong — a page fails to load, a server error occurs — we use Sentry to capture the error so we can fix it. Sentry may receive the error type, a stack trace, and the page URL. It sets no cookies, is not used for advertising, and is hosted in the European Union (Germany). No personal data from brand pages is sent to Sentry.
Brand pages aggregate public information about legal entities: regulator decisions, product recalls, NGO reports, press coverage. Every claim links to its source. We do not publish personal data; where a cited public document contains some (a court ruling, for instance), the source is authoritative and we do not reproduce it.
Processing this public information rests on the legitimate interest of informing consumers (GDPR, art. 6(1)(f)) and on freedom of expression and information. Grades are opinions grounded in a published methodology and sourced facts.
The data controller is: [legal name and company form to be inserted], [address to be inserted]. DPO / data contact: privacy@ethica.cc.
Technical server logs: 30 days. Admin audit logs (logins, score edits): 12 months. Brand and source data: kept while the brand is published, then archived to support rectification requests.
You have the right to access, rectify, erase, restrict, port and object to the processing of your personal data. To exercise them, email privacy@ethica.cc with proof of identity.
Do you represent a graded brand? Every brand page says how to reach us. Any request backed by verifiable elements (factual correction, outdated information, new evidence) goes through human review, and the grade is recalculated by the same methodology. We reply within 30 days.
The service is hosted in the European Union. Database: Neon (Frankfurt). Backend application: Fly.io (Paris). Frontend: Vercel. Transactional email: Resend. Audience analytics: Plausible. Error tracking: Sentry (Germany). No visitor data is transferred outside the EU.
For any data-related question: privacy@ethica.cc. If, after contacting us, you believe your rights are not being respected, you can lodge a complaint with your local supervisory authority (in France: CNIL, cnil.fr).