Privacy policy
Last updated: October 22, 2026
1. Data controller
Mathieu Corne — Sole Proprietorship (Entrepreneur Individuel) SIREN: 943 061 820 Address: 50 avenue des Champs-Élysées, 75008 Paris Email: privacy@opalecrest.com
2. What this policy covers
This policy describes the processing carried out by Opale ID (opale.id), the identity service that lets you sign in to OpaleCrest apps and, through them, to the assistants you link to them. What each app then does with your data is governed by its own privacy policy.
3. Data processed and purposes
Account — your username and the Opale ID address derived from it (name@opale.id, an identifier with no inbox), your password (stored as a hash, never in clear text), your date of birth (required), your first and last name if you give them, your recovery address if you give one (verified by a code sent to it) the names of your workspaces and the version of the terms you accepted, with its date. Purpose: creating and maintaining your account, signing you in to services. Legal basis: performance of the contract. Age — your date of birth is used to check the minimum age, work out your age band and close the advertising choices under 15 (see "Minors"). Legal basis: performance of the contract and legal obligation (GDPR article 8, article 45 of the French Data Protection Act). Account security — your sessions (IP address, device and browser, service the sign-in came from, date, sign-in method), recognised devices (a random identifier set in your browser, the browser, the last IP address), the activity log (successful or refused sign-ins and security changes, with their date, IP address, device and service), attempt counters tied to an IP address or an account, and, if you turn them on, the two-step secret, your recovery codes (stored as hashes) and your passkeys (public key, the name you give it, creation and last-use dates). Purpose: protecting your account, slowing down abusive attempts, showing you who signed in and alerting you. Legal basis: legitimate interest in account security, and performance of the contract for the protections you turn on. Alerts and recovery — to your recovery address we send verification codes, password reset links (valid for 30 minutes) and security alerts: a sign-in from a new device, a password changed or reset, each step of a recovery. An alert gives the date, the device, the approximate place inferred from the IP address and the IP address. If two-step is on and you cannot present any of your factors, a reset opens a 7-day wait that any signed-in session can cancel; we keep the date, IP address and device of the request. Legal basis: performance of the contract and legitimate interest in security. Notices from apps — at the request of an OpaleCrest app you use, we send your verified recovery address a notice about it: the confirmation of a purchase, which the law asks to be given to you on a durable medium, or the announcement that your unused data there will be erased. The app never receives your address: it only learns whether the notice went out, or that you have no verified address. We keep the kind of notice and its date, not its content. Legal basis: performance of the contract and, for a purchase confirmation, legal obligation. Device integrity (Android) — when you sign in from an Android app, the app asks Google Play for an assessment of the app and the device, which we have Google read. We keep only the verdict with the session: whether Google Play recognises the app, the device's integrity level and the date of the check. No device identifier is kept. A doubtful verdict may ask for your second factor or limit the number of sign-ups; only an app Google Play does not recognise cannot create an account. Purpose: spotting a modified app or a compromised device. Legal basis: legitimate interest in security and fraud prevention. Connected services and consents — the list of services you have signed in to, with the date, and the register of your consents: for each purpose, your choice (granted, refused or withdrawn), its date, where you made it (your dashboard or the app itself, such as Pirate Gems' advertising choices), the version of the text shown, the device and the session. Opale ID keeps this register for every OpaleCrest app, so your choice follows you from one device to another. Purpose: showing you who accesses what, applying your choices and being able to prove each consent. Legal basis: performance of the contract and the legal obligation to prove consent (GDPR article 7). Encryption keys — when a connected service encrypts your data on your devices, Opale ID keeps the public key and copies of the private key, themselves encrypted by your devices or your passkeys, which it cannot open. Purpose: getting your encrypted data back on a new device. Legal basis: performance of the contract. Public profile — activation, services made visible, personal links. Purpose: displaying a public profile if you choose to. Legal basis: consent. This option is disabled by default. Technical logs — errors, status and duration of requests, stripped of your identifiers, email addresses and IP addresses before they are kept. Purpose: running the service and fixing its failures. Legal basis: legitimate interest. Test accounts — accounts OpaleCrest creates for its own testing, demonstrations and app store review are marked as such and concern no member.
4. What is shared with connected services
Each service receives an identifier of its own: two different OpaleCrest apps never receive the same one. OpaleCrest apps (today Korem, Voyelle and Pirate Gems) also receive your age band (13-14, 15-17 or 18 and over), never your date of birth, whether personalised advertising is open to you, the level of your sign-in (with or without two-step) and, only if they ask for them, your Opale ID address and your first and last name if you have given them: today Korem and Voyelle ask for the address and the names, Pirate Gems asks for neither. Since your Opale ID address is the same everywhere, the apps that receive it, which share one publisher, can recognise you by it. Your recovery address is shared only with a service that requires a verified address, when it asks for it. We also tell the services that support it when you sign out and when your password or sign-in methods change, so they close the sessions concerned. When you delete your account, we ask each connected service to erase your data and repeat the request until it confirms; when you export your data, we ask it for its share. If you link an assistant to a service (today Claude, by Anthropic, or ChatGPT, by OpenAI, for Voyelle), the assistant receives the identifier of that service and the level of your sign-in, without your address, names, date of birth or age band; it then acts on that service on your behalf. Anthropic and OpenAI are based in the United States: what they do with your data is governed by their own terms. Your password is never shared with any service. Disconnecting a service or an assistant from your dashboard withdraws your consents going forward, tells it so and closes its sessions still open and also disconnects the assistants that reach it, which will have to ask for your permission again. Withdrawal does not erase data the service has already received, which is governed by its own policy.
5. Minors
Opale ID is for people aged 13 and over: your date of birth is asked at registration, or at the next sign-in of an account without one, and can't be changed afterwards. If it shows you are younger, the account is not created; an existing account is signed out and reviewed by a person within 30 days; if it still shows under 13 at the end of that period, it is deleted as if you had deleted it yourself, and we keep only the fact that an account was deleted for that reason, with its date. A typing mistake is corrected by writing to privacy@opalecrest.com from your recovery address. Connected apps receive your age band (13-14, 15-17 or 18 and over), never the date itself; assistants receive neither. Under 15, no consent to personalised advertising is recorded as given, even if given in an app, and connected services are told it is closed to you: in France you must be 15 to consent to it on your own (GDPR article 8). At 15 the usual flow applies by itself.
6. Retention periods
Account, profile, current consents and passkeys — for as long as the account exists. An account not used to sign in for 3 years is deleted, as if you had deleted it yourself; an email warns you a month ahead at your recovery address, and simply signing in keeps it. The two-step secret is erased as soon as you turn two-step off; recovery codes remain until you generate new ones. Sessions — an unused session expires after 30 days; an ended session is erased 12 months after it ends. Activity log — 12 months. Notices sent at an app's request — their kind and date, 90 days. Attempt counters — 24 hours. Recognised devices — 13 months after they were last used. Recovery requests — 12 months after they were completed or cancelled. Acceptance of the terms — the version accepted and its date, for as long as the account exists. Single-use codes and links — a verification code is erased one hour after it expires; a reset link, valid for 30 minutes, is erased 30 days later; a two-step secret never confirmed is erased after 30 minutes. Notices sent to services — sign-outs and security changes: 30 days after delivery. Erasure requests: 30 days after the service confirms, 12 months if it never answers. Consent register — for as long as the account exists. When the account is deleted, it is detached from you (your identifier is replaced by a pseudonym and the technical evidence is erased) and kept in that form for 5 years after its last event, to evidence the consents collected, then erased. Account held for an age review — 30 days at most; at their end, an account that still shows under 13 is deleted, and only the fact and its date are kept. Backups — encrypted and kept for 30 days, after which deleted data is gone from them too. Deleting the account erases everything else at once.
7. Recipients, hosting and transfers
Your data is never sold, rented, or used by Opale ID for advertising. It is processed on our behalf by: — our hosting provider, in France, for the database, its backups and sending emails; — the provider hosting Opale ID's pages and API: every request, with your IP address and what it carries, goes through its servers, which may be outside the European Union; — Google, only when you sign in from an Android app, to read the integrity verdict described above. Transfers outside the European Union are governed by the European Commission's standard contractual clauses. To refuse a password that has already leaked, we check a public database of leaked passwords with a short fragment of its hash, which can neither recover the password nor identify you. Connected services and the assistants you link receive what is described above.
8. Security
Passwords are stored as cryptographic hashes and cannot be reconstructed; a password that has already leaked publicly is refused. Session tokens and recovery codes are stored hashed. Traffic is encrypted in transit and backups are encrypted. Two-step and passkeys are available and recommended.
9. Your rights
You have the right to access, rectify, erase, port, object to, and restrict the processing of your data, as well as the right to withdraw your consent at any time. You can exercise most of these rights directly from your dashboard: review, withdrawing consents, closing sessions, export (profile, public profile settings, workspaces, connected services, consents and their history, the versions of the terms accepted, the full activity log, sessions, recognised devices, recovery and password reset requests, recovery code status, passkeys, the identifier of your own each app receives, encryption keys (their dates and those of their copies, never the keys themselves), and the share of each connected service that provides one) and account deletion, which applies at once and is passed on to connected services. For any other request, including correcting a date of birth or objecting to processing based on our legitimate interest, write to privacy@opalecrest.com: we respond within 30 days at most.
10. Automated decisions
Opale ID makes no decision based on profiling. A few automatic checks apply to comply with the law and protect accounts: refusing a registration under 13, closing the advertising choices under 15, refusing a password that has already leaked, asking for a second factor or limiting sign-ups from a doubtful Android device, and deleting an account that still shows under 13 at the end of its 30-day review. If you believe one of these checks was applied to you wrongly, write to privacy@opalecrest.com: a person will review your situation.
11. Complaints
If you believe your rights are not being respected, you may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, 75007 Paris — cnil.fr.
12. Cookies and local storage
Opale ID sets two cookies, strictly necessary and therefore exempt from consent: oid_session, which keeps you signed in (30 days at most), and oid_device, a random identifier that recognises your browser so you can be alerted to a sign-in from a new device (400 days at most). Your theme and language choices are kept in your browser. No analytics or advertising cookies are used.
13. Changes to this policy
This policy is updated when the service changes; the date of its last update is shown at the top of the page.
14. Contact
For any question about your personal data: privacy@opalecrest.com