Privacy Policy

Data controller

The data controller for personal data collected on fullstackhuman.sh is: FSC CONSULTING, EURL with a share capital of €1,000.00, SIRET 851 331 298 00022, 42 rue Voltaire, 92800 Puteaux, France.

Contact: hello@fullstackhuman.sh

Data collected

We collect the following data: email address (when creating an account), display name (optional), conversation content with the AI, and usage metadata (conversation timestamps, selected persona).

For anonymous users (without an account), no personally identifiable data is collected. A functional cookie may be used to track conversation quota, subject to your consent.

If you accept cookies, we measure site audience with PostHog: pages viewed, a few actions (choosing a persona, generating a report, completing a lesson, starting a payment and buying a course), browser and device type, and approximate country. This data is tied to a random identifier, not to your account. We do not record your sessions or produce heatmaps.

Data processing

Your conversation content is sent to the Anthropic Claude API to generate AI responses. Anthropic processes this data in accordance with their own privacy policy, available at: https://www.anthropic.com/legal/privacy

Authentication is managed by Supabase (Supabase Inc., Singapore). Account data (email, hashed password) is stored in a database with encryption at rest and row-level security (RLS) policies.

Hosting is provided by Vercel Inc. (San Francisco, USA). Data may transit through servers located outside the EU. Contractual safeguards (standard contractual clauses) govern these transfers.

Audience measurement is provided by PostHog Inc., hosted in the European Union (PostHog EU Cloud). Your IP address is only used to infer the country and is not stored. This processing is based on your consent, which you can withdraw at any time through the “Cookie settings” link in the footer: tracking stops and the PostHog cookies are deleted.

Course purchases (FSH Learn)

Course payments go through Stripe Managed Payments. Sold through Link, LLC, a Stripe company, acts as merchant of record: it collects the transaction data (name, email address, payment method, billing address, amount) to collect the payment, calculate VAT, send you the receipt and handle support, refunds and disputes. Stripe uses this data on its own account, under its privacy policy: https://link.com/privacy. You can ask Stripe to delete it.

On our side, we record the course bought, the amount, the currency, the purchase date, the Stripe payment session ID and, where relevant, the refund date. We use this data to open and keep your access to the course, to perform the sales contract.

Cookies used

fsh_consent_v2: Strictly necessary cookie. Stores your cookie consent choice. Duration: 6 months. No consent required.

fsh_conversations: Functional cookie. Tracks anonymous conversation count to enforce daily quota. Duration: 24 hours. Requires your consent.

sb-*: Strictly necessary cookies. Manage user authentication and session (Supabase). No consent required.

ph_*: Audience measurement cookie and local storage (PostHog). Holds a random identifier. Duration: 12 months. Requires your consent.

Your rights

Under the General Data Protection Regulation (GDPR), you have the following rights: right of access (Art. 15), right to rectification (Art. 16), right to erasure (Art. 17), right to data portability (Art. 20), right to object (Art. 21), and right to restriction of processing (Art. 18).

You can delete your account and all associated data directly from the Account Settings page. For any other request, contact us at hello@fullstackhuman.sh.

You also have the right to lodge a complaint with the CNIL (French Data Protection Authority): www.cnil.fr

Data retention

Conversation content: conversations are not currently persisted beyond the browser session. Once the tab is closed, the content is lost.

Account data (email, name): retained until the user deletes their account.

Course purchases: the purchase record is deleted with your account. Stripe, as merchant of record, keeps the sale records under its own policy.

Audience measurement (PostHog): events kept for 1 year.

Functional cookies: maximum lifetime of 24 hours.

Contact

For any questions regarding the protection of your personal data: hello@fullstackhuman.sh