Privacy Policy

Historic Prism limits collection to data useful for operating the publication, managing accounts and subscriptions, the newsletter, security and documentary functions requested by users.

Reader data is not sold to advertisers. Historic Prism currently uses no advertising or retargeting system on the website.

When an account is created, Historic Prism processes the display name, email address, email verification status and a password stored as a hash, never in plain text. Information about login attempts and sessions may be retained to protect the service.

Readers can request deletion of their account directly from “My account”. Deletion signs out active sessions and removes account-linked data that does not have to be retained. Transaction records required for accounting, tax obligations or the defence of legal rights may be kept for the legally required period without remaining linked to the user account.

These operations are necessary to provide the requested service and for Historic Prism’s legitimate interest in preventing fraud and unauthorised access.

Historic Prism stores the subscription tier, status and billing interval and, once Stripe is activated, technical Stripe customer and subscription identifiers. Full payment card details are handled by the payment provider and are not stored in the Historic Prism database.

Data required for invoicing and proof of transactions may be retained for the periods imposed by accounting, tax and legal-claims obligations.

Subscribing to The Letter entails storing the email address and subscription status. The legal basis is consent where consent is required. Each edition of The Letter must include an individual unsubscribe link; the subscription status is then updated to respect that choice.

Email verification, security and password-reset messages are service communications necessary for account operation.

When a user asks the documentary assistant a question, the text of the question and the relevant corpus are transmitted to the AI provider needed to generate the answer. Historic Prism currently uses OpenAI services and/or AI services integrated into Floot depending on the feature and availability.

The public question service keeps a monthly usage counter linked to the account in order to apply the quota. Historic Prism never presents model output as an autonomous documentary source.

Historic Prism uses limited internal audience measurement based on pages viewed in order to understand site use and improve navigation. Since this policy was introduced, these events are sent only after consent to the “Statistics” category and are not associated with the account identifier.

They are retained for no more than thirteen months. No advertising cookie is used for this measurement.

When an authorised administrator connects Historic Prism Social to Meta, the service requests only the permissions needed to list managed Facebook Pages, read the Page information required by the integration and publish administrator-approved content. Meta may also require the business_management permission when the selected Page belongs to a Meta business portfolio; Historic Prism uses that permission only to resolve the authorised Page, not to administer unrelated business assets. Historic Prism may store the Page identifier and name, granted permissions, encrypted Page access token and technical connection metadata.

If a professional Instagram account is later linked through Meta, its identifier and username may also be processed for publishing. The connection can be revoked and its stored connection data deleted. See the Meta data deletion instructions.

When an authorised administrator connects a YouTube channel, Historic Prism uses Google OAuth and the YouTube Data API only to upload administrator-approved videos or Shorts to the connected channel. Historic Prism requests the youtube.upload permission for this purpose. It does not request access to view the user's YouTube account or browsing activity.

Historic Prism receives and stores encrypted OAuth access and refresh tokens needed to perform the requested uploads, together with limited technical publication metadata such as the resulting YouTube video identifier, publication URL, timestamps and errors. Historic Prism never receives or stores the user's Google password.

Sharing, transfers and disclosure: Google user data is not sold, rented, used for advertising, profiling, credit decisions or data brokerage. It is not disclosed to advertisers, analytics providers or AI providers. It may be processed by Floot, acting as Historic Prism's hosting and application-infrastructure provider, only to operate and secure the service; it is transmitted to Google / YouTube only as necessary to execute the upload action requested by the administrator; and it may be disclosed where required by applicable law. Historic Prism does not otherwise transfer Google user data to third parties.

OAuth tokens are retained only while the YouTube connection remains active and are revoked or deleted when the administrator disconnects YouTube. Limited technical publication logs may be retained for security, troubleshooting and editorial traceability.

When an authorised administrator connects a TikTok account, Historic Prism uses TikTok OAuth, Login Kit and the Content Posting API only to identify the authorised account and send videos that the administrator has explicitly reviewed and approved. The integration requests user.info.basic and video.publish.

Historic Prism may process the TikTok account's stable identifier, display name, avatar, current creator publishing settings, encrypted OAuth access and refresh tokens, and limited technical publication metadata such as the TikTok publish identifier, processing status, resulting post URL, timestamps and errors. The publication screen requires an explicit choice of visibility and a separate confirmation before each TikTok upload; Historic Prism does not currently enable unattended scheduled TikTok posting.

TikTok connection data is not sold, rented or used for advertising, profiling, credit decisions or data brokerage. It may be processed by Floot only as Historic Prism's hosting and application-infrastructure provider, and is transmitted to TikTok only as necessary to authorise the connection, publish the administrator-approved video and check its publication status. TikTok connection data obtained through the API is not sent to OpenAI or Floot AI services.

OAuth tokens are retained only while the TikTok connection remains active and are revoked or deleted when the administrator disconnects TikTok. Limited technical publication logs may be retained for security, troubleshooting and editorial traceability.

Data is accessible only to people or providers who need it to supply the service. Depending on the feature used, the main providers are Floot for hosting and application infrastructure, Google / YouTube for authorised YouTube publishing, TikTok for administrator-authorised TikTok account connection and video publishing, Stripe for payment when activated, and OpenAI / Floot AI services for certain artificial-intelligence functions. Google and TikTok connection data obtained through their respective APIs is not sent to OpenAI or Floot AI services.

Some providers may process data outside the European Economic Area. Where required by law, such transfers must rely on a GDPR-recognised safeguard.

• Account: for the life of the account, then only what remains necessary for legal obligations, security or the defence of rights.
• Login session: technical cookie valid for seven days and renewable after session validation; an inactive session expires.
• Newsletter: until unsubscribe, followed by minimal retention of the unsubscribe choice where necessary.
• Audience measurement: no more than thirteen months.
• Billing data: for the applicable statutory periods.

Depending on the processing concerned, you may have rights of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw consent at any time where processing is based on consent.

Requests may be sent through the contact form. You may also lodge a complaint with the CNIL, the French data-protection authority.

Historic Prism publishes information about public officials, political actors, organisations and historical or contemporary events. Such processing is carried out under freedom of expression and information and the publication’s editorial mission, on the basis of relevant documentary sources.

Requests to correct factual errors are examined carefully, subject to the specific rules applicable to journalistic processing and the preservation of archives in the public interest.

Communications with the site are encrypted in transit using HTTPS. Technical secrets remain server-side and passwords are not stored in plain text. As no system can be guaranteed risk-free, Historic Prism follows a policy of data minimisation and access control.

This policy may evolve when new features or providers are introduced. The update date displayed at the top of the page identifies the applicable version.