Privacy
Privacy policy
This is a translation provided for convenience. The French version prevails.
Last updated: November 13, 2026 (device fingerprint of the free analysis; clicks on our short links; audience measurement subject to your consent). Restates article 6 of the terms of subscription.
Data controller
NEXUS, publisher of Hypervisible. Contact: contact@nexus-geo.fr.
Data processed
- Personal data: users’ email addresses, first and last names when provided, and connection log (date, time, truncated IP address).
- Password, if you create one: it never leaves your browser, which only sends a key derived from it; we only keep a fingerprint that can’t be turned back into your password. Password sign-in attempts are counted for one day at most, as fingerprints of the email entered and of the network, to limit abuse.
- Free analysis: an analysis run from the website creates a workspace at the email address entered. To limit free analyses and prevent abuse, we keep an encrypted fingerprint of the connection and of the device (an identifier drawn at random, which your browser keeps in a cookie, hv_appareil, and in its local storage, and a signature of its settings: screen, time zone, languages, graphics rendering), never the IP address in clear; the device fingerprint is deleted after 30 days.
- Visit origin: when you run an analysis or create your workspace through a sign-in link, the website you came from (its name only, for example google.com), the landing page on our site and the campaign parameters in the address (utm_…) are recorded with it, so we know which channels bring people to us. They travel in the page addresses: no cookie, no storage in your browser, no third-party tool. We also record the country, inferred from the connection, and the type of device (mobile or computer), without the IP address. A click on one of our short links (hypervisible.app/p/…) is counted the same way: its date, the link, the country and the type of device, without the IP address.
- Customer account data: brands, aliases, namesake patterns, competitors, tracked questions, selected engines.
- Use of the application: the screens you open in your workspace, the time spent on each, the buttons you press (their label as displayed, which may repeat a name or a question visible on screen; an email address in it is masked) and the choices you make in a list, never what you type into a field, linked to your account, so we understand how the service is used, improve it and support you. No additional cookie, no third-party tool.
- Audience measurement, only if you accept it: pages viewed (their address without the identifiers it may carry), where the visit came from, device, browser, approximate city, and a few moments of the journey (analysis run, sign-up, sign-in, leaving for payment, subscription or plan change, with no amount, name or email address), through Google Analytics; clicks, scrolling and anonymized recordings of navigation, through Microsoft Clarity, with the application’s text masked. IP addresses are neither kept nor visible to us.
- Data produced by the service: engine answers, mentions, sources, quantified summaries, cost of each reading.
- Billing data: processed by Stripe; NEXUS does not keep any card number.
Purposes and legal basis
Performance of the subscription contract: sign-in through a link sent by email, launching the readings, sending the “your analysis is ready” and “your reading is ready” emails, billing, support. No prospecting based on account data. The record of how the application is used relies on our legitimate interest in improving the service and supporting our customers; you can object to it by email. Audience measurement relies on your consent, asked on your first visit, which you can withdraw at any time, as easily as you gave it.
Ownership and no resale
The customer’s data (questions, brands, competitors, answers, summaries) belongs to the customer. NEXUS does not resell it and does not aggregate it into a public offering.
Processors
- Cloudflare, Inc.: hosting of the application and of the database, with European Union regions preferred.
- Stripe: payment of subscriptions.
- Resend: sending of sign-in and reading emails.
- Google Ireland Limited (Google Analytics), only with your consent: audience measurement. Advertising signals and sharing for advertising purposes are turned off.
- Microsoft Ireland Operations Limited (Microsoft Clarity), only with your consent: journey analysis.
Retention period
For the duration of the subscription, then 12 months in read-only mode after termination; the data is then deleted (retention period to be confirmed). The connection log is kept for 12 months, the record of how the application is used for 180 days. Audience measurement: 14 months in Google Analytics; navigation recordings 30 days and statistics 13 months in Microsoft Clarity. Your cookie choice is kept for 6 months, then asked again.
Transfers outside the European Union
Google and Microsoft may process audience measurement data in the United States. These transfers rely on the EU-US Data Privacy Framework, to which both companies have adhered, supplemented by the European Commission’s standard contractual clauses.
Cookies
Without your consent, the website sets and reads no measurement cookie: no request goes to Google or Microsoft before you choose. Your choice itself (accept, reject or customize) is kept in your browser (local storage, hv_consentement), with nothing that identifies you, for 6 months.
Strictly necessary cookies, always present: the application sets a session cookie (vernier_session), needed for signing in, valid for 30 days; alongside it, a hint cookie (hv_espace, value “1”, holding no data, same duration) lets the website show “My workspace” instead of “Sign in”, and is removed when you sign out. Running an analysis also sets, for 24 hours, a technical cookie (hv_lanceur) that lets only the browser that ran it open its workspace. Finally, a free analysis sets a device identifier drawn at random (hv_appareil, 400 days, also kept in local storage), used only to limit free analyses; its fingerprint is deleted from our servers after 30 days.
Measurement cookies, only if you accept them:
- Audience measurement (Google Analytics): _ga and _ga_1Y8GQXH2N4, 13 months at most, never extended by a new visit.
- Journey analysis (Microsoft Clarity): _clck (1 year) and _clsk (1 day) on our domain, and Microsoft cookies on its own domains (clarity.ms) for the same purpose.
To change your mind at any time: the “Cookies” link at the bottom of every page, or this button. Withdrawing consent immediately deletes the measurement cookies from our domain.
Your rights
Access, rectification, erasure, restriction, portability and objection, by email to contact@nexus-geo.fr. Response within one month. You may refer the matter to the CNIL (the French data protection authority) in the event of disagreement.