Filter

Privacy policy

AT Filter is designed to know as little as possible about you. Here is exactly what we keep, why, and your rights.

Updated: 23 October 2026

What we do not collect

Your browsing history. The filter decides on the device: the addresses of the sites you visit are not sent to us.

What we keep

  • Account: email address of parents and administrators, chosen language.
  • Household: household name, first names of the people you add, levels and settings.
  • Devices: the device's name, system, AT Filter version, protection status, last connection, and on Android the list of installed apps (so parents can see it).
  • Unblock requests: address of the requested site, optional message, decision.
  • Household log: actions taken in the console.
  • Payment: plan, number of devices, dates and amounts. Card data is handled by Stripe and never reaches us.
  • "Request a call" form: address, name, country, number of devices and community if you give them.

Why

  • To run the service: filter according to your settings, alert parents, handle requests (performance of the contract).
  • To invoice and keep accounts (legal obligation).
  • To contact you if you asked (consent).
  • To protect the service against abuse (legitimate interest).

We neither sell nor rent your data, and there is no advertising in AT Filter.

Who processes it

  • Supabase (database and sign-in), servers in Frankfurt, Germany.
  • Vercel (hosting of the site and console).
  • Stripe (payment).
  • Resend (sending emails).
  • If AI-assisted request handling is enabled: an artificial intelligence provider receives the request text and the site address, without your email.

Some of these providers may process data outside the European Union, under the European Commission's standard contractual clauses.

How long

  • Account and household: as long as the account exists, then deleted within 30 days of closing it.
  • Unblock requests and log: 2 years at most.
  • Invoices: 10 years (accounting obligation).
  • Contact form: 3 years after the last exchange.

Your rights

You can access, correct, delete or export your data, object to processing or ask for it to be restricted. Write to us at [to be completed: contact email]. You can also complain to your data protection authority (in France, the CNIL).

Children

The account is opened by a parent or an institution. Children's devices only send the protection status and unblock requests.

Data controller

[to be completed: company name, address, registration number].