RGPD / GDPR
Privacy Policy
Last updated: 26 October 2026
At K-Flow, protecting your personal data matters. This policy explains what information is collected, why it is used, how it is protected and what rights you have.
Who is responsible for your data?
K-Flow is a personal and independent project published in France.
The website publisher is the controller of personal data collected in connection with its operation.
Controller: Maëla Joly, publisher of the K-Flow website on a personal and non-professional basis.
For any question about your personal data, you can write to contact@k-flow.eu.
What data is collected and why?
You can read stories and view K-Flow learning resources without creating an account.
Certain features, including saved progress, badges, trophies and comments, nevertheless require a user account.
The data processed depends on the features you use.
| Feature | Data | Use and legal basis |
|---|---|---|
| User account | Email address, identifier, pseudonym and information required to sign in | Create and manage your account — performance of the service |
| Profile | Pseudonym, age range, optional country and, from age 15, optional date of birth | Manage your profile — performance of the service; optional statistics — consent where required |
| Reading and progress | Stories viewed, progress, preferences, badges and trophies | Save your journey and personalise your experience — performance of the service |
| Comments | Pseudonym, messages, replies, language and location within the story | Enable discussions — performance of the service; moderation — legitimate interests |
| Aide au Clic | Selected words or expressions, questions and information required to process them | Answer your learning requests — performance of the service |
| Notifications | Content, status and notification preferences | Inform you about replies and activity relating to your account — performance of the service |
| Ko-fi support | Contribution information actually transmitted to K-Flow | Track voluntary support — processing required for the contribution and any legal obligations |
| Security | IP address, sign-in dates and technical logs | Protect the website, prevent abuse and resolve technical issues — legitimate interests |
K-Flow’s legitimate interests include securing its infrastructure, preventing abusive use and maintaining a respectful community space.
Data required to create an account is necessary for its operation. Other information, such as country or date of birth, is optional.
Your personal information remains private
Your email address and date of birth are never displayed publicly.
Your pseudonym and comments you choose to publish are visible to other users. If you enter a country, it may also be used as a public comment-filtering criterion without being shown on your profile.
At sign-up, only an age range is requested: 12–14 or 15 and over.
From age 15, you may also enter your date of birth in your account settings. This information is optional, remains strictly private and is used only to produce aggregate age statistics without publishing individual data. This option remains disabled for ages 12–14 until a reliable joint child-parent approval process is in place.
Where is your data stored?
K-Flow uses private infrastructure self-hosted in France to operate the website and store its data.
Access to personal information is limited to the publisher where necessary for website administration, support and moderation.
Certain external services may be involved depending on the features used:
Google is involved only if you choose to sign in to K-Flow with your Google account. Information required for that connection is then exchanged with this service.
Ko-fi is involved if you choose to support K-Flow financially. Information required for your contribution is processed under Ko-fi’s terms and privacy policy.
Information concerning any transfers outside the European Economic Area and the applicable safeguards must be specified according to the services actually used.
Cookies and browser storage
K-Flow uses local storage mechanisms required for its operation.
In particular, they keep your sign-in session, reading progress and certain preferences, such as language or display settings.
This information is not used to track your browsing on other websites.
K-Flow currently uses no targeted advertising or visitor advertising-tracking tool.
Fonts are hosted directly by K-Flow, with no connection to Google Fonts required.
Certain external services, including Ko-fi, may use their own trackers. Where their use requires your consent, it must be obtained before they are activated.
You may also delete locally stored data through your browser settings. Certain features may then require you to sign in again or may lose their saved preferences.
How long is your data retained?
K-Flow retains personal data only for as long as necessary for its use, service security or compliance with legal obligations.
The periods enforced by the website are as follows:
| Data | Retention period |
|---|---|
| Account and progress | Until the account is deleted, subject to legal exceptions |
| Read notifications | 1 year |
| Unread notifications | 2 years |
| Reports and moderation decisions | During processing and for up to 5 years after closure |
No automatic deletion is currently based solely on account inactivity. Retention periods for technical logs and backups depend on the self-hosted infrastructure configuration and must be confirmed before production.
Certain information may be retained for longer where justified by a legal obligation, security incident or dispute.
Data stored directly in your browser may remain there until deleted by you or the browser.
What are your rights?
Under the General Data Protection Regulation (GDPR), you have several rights over your personal information.
In particular, you may ask to access, correct, delete or restrict use of your data. Where provided by law, you may also request portability, object to certain processing or withdraw consent previously given.
From your K-Flow account settings, you can change certain personal information, export data made available by the website and request deletion of your account.
For any other request, write to contact@k-flow.eu.
You may also lodge a complaint with the French Data Protection Authority (CNIL).
Protection of underage users
K-Flow is available from age 12.
Users aged 12 to 14 have access to the same educational and community features, including progress, badges, trophies, comments and Aide au Clic.
Particular care is given to protecting their personal information.
In France, where optional personal-data processing for an online service relies on consent, joint agreement from the child and a holder of parental responsibility is required below age 15.
Until a reliable process for collecting that agreement is in place, optional date-of-birth statistics, optional community emails and marketing communications are disabled for ages 12–14. This protection applies to both email sign-up and Google sign-in.
K-Flow currently sends no advertising communication or commercial newsletter.
We also encourage all users, particularly younger users, never to publish personal information in their comments.
Changes to this policy
This Privacy Policy may change to reflect new K-Flow features or regulatory developments.
Significant changes will be communicated clearly and accessibly.
For any question, you can contact us at contact@k-flow.eu.