Privacy Policy

1. Introduction

VitaPulse (https://vitapulse.e-xode.net) is operated by e-xode. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our web performance monitoring service. We are committed to complying with the General Data Protection Regulation (GDPR) and applicable French data protection laws.

2. Data We Collect

We collect the minimum data necessary to provide the service.

3. Types of Data

Personal Data: Account information: email address, password (stored as a bcrypt hash, never in plain text), display name, and company name (optional). Billing information: managed entirely by Stripe — we never store your credit card details on our servers.

Usage Data: Scan data: Lighthouse audit results for your websites (scores, Core Web Vitals, opportunities, diagnostics). Session data: a session cookie to keep you signed in (HTTP-only, 7-day duration). Preference data: your language preference (stored in your browser's localStorage, not on our servers).

4. How We Use Your Data

Your data is used exclusively to provide and improve the VitaPulse service: to authenticate your account and manage your session; to run Lighthouse audits on your websites and store the results; to generate PDF reports and enable sharing features; to send email notifications (scan results, associate invitations) when enabled; to process payments through Stripe for paid plans. We never use your data for advertising, profiling, or sale to third parties.

5. Data Storage and Retention

Your data is stored in MongoDB databases hosted in Europe. Scan results are retained for the duration of your account. Session files are automatically cleaned up. Upon account deletion, all personal data and project data are permanently deleted within 30 days. Billing records may be retained longer as required by French tax law.

6. Data Sharing

We share data only with the following service providers, strictly necessary for operating VitaPulse: Stripe for payment processing; your email provider for transactional notifications (scan results, invitations). We do not sell, rent, or share your personal data with any other third party. When you use the share feature, scan results are accessible via a public link — but this is always initiated by you.

7. Your Rights (GDPR)

Under the GDPR, you have the right to: access the personal data we hold about you; rectify inaccurate or incomplete data; request deletion of your account and all associated data; restrict or object to certain processing of your data; request portability of your data in a structured format; withdraw consent at any time where processing is based on consent. To exercise any of these rights, contact us at vitapulse@e-xode.net. We will respond within 30 days.

8. Cookies

VitaPulse uses a single session cookie (HTTP-only, SameSite) to keep you authenticated. We store your language preference in your browser's localStorage. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. For more details, see our Cookie Policy.

9. Security

We implement appropriate technical measures to protect your data: TLS encryption for all communications, bcrypt password hashing, HTTP-only session cookies, input validation and sanitization, rate limiting on all API endpoints, and CORS restrictions. No method of transmission over the Internet is 100% secure, but we continuously work to protect your information.

10. Changes to this Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via email or in-app notification. The date of the last update is indicated at the top of this page.

11. Contact

For any questions about this Privacy Policy or to exercise your data protection rights, contact us at vitapulse@e-xode.net or through the contact form on our website.