Privacy and cookies

About this policy

OXYGENE NUMERIQUE is the controller for this website. Contact rudy@oxynum.fr about your personal data. Website analytics do not monitor activity inside the Cockpit desktop app.

Your choice

Google Analytics loads only after you accept. Refusing has no effect on access or downloads. Change or withdraw your choice at any time using Cookie settings. Your choice is stored locally for 180 days.

Optional analytics

With consent, Google Analytics processes page views, download clicks, referral and campaign information, device information and approximate location to help improve Cockpit. Advertising features are disabled. Analytics cookies (_ga and _ga_*) expire after 180 days without automatic extension.

Technical download records

The server keeps daily totals of full responses, partial responses and interrupted transfers for 366 days. These counters contain no IP address, browser identifier or individual profile. They measure files served, not unique people or installations. Source categories are added to website downloads only after analytics consent.

Essential operation

Your language preference is stored locally until you clear it. Consent preferences are stored to respect your choice. The hosting provider processes connection data to deliver and secure the site under its own retention policy. Technical operation relies on our legitimate interest in providing a reliable service.

Free trial in the app

When you start the 7-day Pro trial in Cockpit, the license server keeps a one-way fingerprint of your computer and the trial start date. They are used only to allow one trial per computer. The trial asks for no name, email address or payment details.

Anonymous usage statistics in the app

Cockpit asks once, inside the app, whether you want to share anonymous usage statistics. Nothing is counted or sent unless you choose Send. Once a day, the app then sends the number of launches, the agents used, the features opened, the Cockpit and operating system versions and the processor type. There is no installation, device or license identifier, no session content and no project path. The server adds each report to daily totals and keeps no individual report or IP address. Totals are deleted after 13 months. You can withdraw at any time in Settings, which also deletes counters not yet sent.

Voluntary diagnostics and licence checks

Cockpit keeps a separate local technical journal limited to 100 entries. Reports exclude local entries older than 30 days. It contains error codes and sanitized technical locations, never prompts, conversations, terminal output, keys or personal paths. Nothing from this journal is sent automatically. Settings lets you preview a report, explicitly send it, or export it locally. Reports and server incidents are kept for 30 days. Linking a report to a licence is optional and requires a separate choice.

Paid licences are checked at startup and every 24 hours using the licence ID, activation ID and device fingerprint. Connection failures preserve local rights. These operational checks are separate from optional anonymous usage statistics. Administrative licence actions are recorded for 12 months. The private administration uses Google sign-in with email and identity scopes only, and an essential secure session cookie that expires after eight hours. No Gmail access is requested.

Support messages, voice notes and feature votes

From Settings, you can write to support, report a bug or suggest an idea. We receive your message, the email address you enter, your Cockpit version, operating system and processor type and, if you choose, your licence ID and a technical diagnostic. A bug report or an idea can include a voice note of up to two minutes, recorded only when you press the microphone. We use these data to answer you and improve Cockpit, and an alert containing your message is sent through Resend to the support mailbox. Messages are kept for 12 months; voice notes are deleted after 180 days at most, or 30 days after the request is resolved. You can ask for a message to be deleted at any time. The public feature board only shows titles and descriptions we write; your message and voice note are never published. A vote is counted once per computer using a one-way fingerprint, with no name or email address.

Cockpit accounts and cloud inference

The optional Cockpit subscription is separate from local use with your own provider keys. Signing in requires an email address and a one-time code delivered by Resend. A secure essential cookie keeps the account signed in for seven days. We store account, connected-device and licence information, hashed access keys, billing references and credit usage to provide the service, prevent abuse and handle support. Access keys expire after 90 days and can be revoked from the account.

With Cockpit cloud inference, the messages, context and tool results sent by your agent are processed by our backend hosted on Railway and our inference provider DigitalOcean. These requests can contain files or personal data selected by you or your agent. Cockpit does not store their contents in its account ledger or enable prompt logging in its gateway. We retain request identifiers, token counts and credit charges for billing and troubleshooting. This does not mean that no data is processed by the service providers; their terms, security controls and retention policies apply.

Stripe processes payment and billing details; Cockpit does not store card numbers. Resend, Stripe, Railway and DigitalOcean may process data outside the EEA. Their data-processing agreements describe transfer safeguards. Account and usage records remain while the account is operated and until a deletion request is handled, subject to billing, fraud-prevention and legal retention requirements. Deletion requests are handled manually: contact rudy@oxynum.fr. Closing a browser or cancelling a subscription does not delete these records.

Processing needed for sign-in, inference and billing is based on performance of the service contract. Fraud prevention is based on our legitimate interest in protecting the service; statutory billing records are retained to meet legal obligations. See the French account and inference notice.

DigitalOcean DPA · Stripe DPA · Resend DPA

Recipients and international transfers

Authorized OXYGENE NUMERIQUE staff, Railway Corporation (hosting) and, with your consent, Google Ireland Limited (Analytics) may process the relevant data. Google and Railway may process data outside the EEA, including in the United States. Their published safeguards describe applicable transfer mechanisms, including standard contractual clauses.

Your rights

You may request access, correction, deletion, restriction or portability of your personal data, object where applicable, and withdraw consent without affecting earlier lawful processing. Contact rudy@oxynum.fr or write to our registered office. You may also complain to the CNIL.