Privacy notice

The publisher of Cap Nationalité is the data controller. For questions, use the site's contact form.

Support messages go to an internal Telegram space used to handle requests.

• Account information, including your email address and hashed password.
• If you sign in with Google: your Google ID, verified email, name, profile image and the OAuth tokens needed to keep you signed in.
• Your quiz results, progress, interview answers and generated feedback.
• Payment information only if a paid option is used in the future.
• Technical data needed to run the site, such as essential cookies and server logs.
• Information you enter in the contact form, if you use it.

We use this data to:

• create and secure your account;
• save your progress and results;
• provide feedback on interview answers;
• manage usage limits, any codes and paid options if they exist;
• keep the service secure, prevent fraud and maintain it;
• meet applicable legal and accounting duties.

The people who run the service can access this data. Where needed, it is also available to:

• the hosting and database providers that store the site and your progress;
• Google if you choose Google sign-in;
• Stripe only if a paid option needs payment processing;
• OpenRouter for AI analysis when you use answer feedback.
• Telegram to receive contact form messages.
• PostHog for optional audience measurement, only if you accept it.

Answers submitted for AI analysis may be sent to the model provider configured on the server to generate feedback.

• Account and progress data are kept while your account exists.
• Google tokens are kept while your account is linked to Google, or until access is removed in Google.
• Billing data are kept for as long as legal and accounting duties require.
• The session cookie is kept for about 30 days, unless you sign out.
• The cookie consent preference is kept for 1 year.

Under the applicable rules, you may ask to access, correct or delete your data. You may also ask to restrict or object to its processing.

You may withdraw consent for processing based on consent. This does not affect the lawfulness of processing already carried out.

The site currently uses:

• an essential sign-in session cookie called naturalisation_user_session ;
• a cookie that remembers your consent choice, called naturalisation_cookie_consent ;
• a temporary security cookie during Google sign-in, called naturalisation_google_oauth_state.

No audience measurement or advertising cookie is enabled by default at present.

If you accept optional cookies, PostHog may measure page views, traffic sources and key actions, such as starting or finishing an assessment. We use these measurements to improve the service and preparation tools.

Contact form messages pass through Telegram. This does not add another browser cookie.

If you think your rights have not been respected, you can contact us first. You may also complain to the relevant supervisory authority, including the CNIL, France's data protection authority.