Privacy Policy

Introduction

The protection of your personal data is at the heart of our mission. This privacy policy informs you about how Zykay SAS collects, uses, and protects your data in accordance with the General Data Protection Regulation (GDPR).

Data controller

The data controller is Zykay SAS, contactable at: contact@zykay.fr

Data collected

Zykay uses zero-knowledge verification technology. This means we do not collect any personally identifiable data (name, surname, address, etc.).

The data processed includes:

  • Zykay pass token: an anonymous cryptographic token attesting to your verification, without revealing your identity
  • Verification status: indicates whether you are a verified citizen (adult, French, unique)
  • Created content: petitions, surveys, signatures, and responses you voluntarily submit
  • Technical data: IP address (for security and rate limiting), session cookies

Processing purposes

  • Verify the uniqueness of participants (one person = one vote)
  • Enable the creation and signing of petitions
  • Enable participation in surveys
  • Ensure platform security (protection against abuse)

Legal basis

The processing of your data is based on your consent (Article 6.1.a of the GDPR) during identity verification, as well as our legitimate interest (Article 6.1.f) for platform security.

Cookies

Zykay uses only strictly necessary cookies for the site to function:

  • Session cookie: keeps your verification session active

We do not use any tracking, advertising, or analytics cookies.

Data retention

Session data is retained for the duration of your session. Created content (petitions, surveys) is retained as long as the platform is active. You may request deletion of your content at any time.

Your rights

In accordance with the GDPR, you have the following rights:

  • Right of access: obtain confirmation of data processing and receive a copy
  • Right to rectification: request correction of inaccurate data
  • Right to erasure: request deletion of your data
  • Right to data portability: receive your data in a structured format
  • Right to object: object to the processing of your data
  • Right to restriction: request restriction of processing

To exercise these rights, contact us at: contact@zykay.fr

Complaints

If you believe that the processing of your data does not comply with regulations, you may file a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés): www.cnil.fr

This privacy policy may be updated. The last update was on March 17, 2026.