Privacy policy

Last updated: 15 October 2026

Who is responsible for your data

GACI Jugurtha, operates ProtestWall and is the controller of your personal data. For any question or request: jugurthagaci24@gmail.com.

What we process and why

Account: username, display name, e-mail address, password (kept only as an irreversible hash) and preferred language. They are used to sign you in, to let you post, comment and save signs, and to send password-reset e-mails. Legal basis: performing the service.

Submissions without an account: optional name and e-mail address, used only to send you the private link that lets you manage or delete your submission. We keep only a fingerprint of that link's token.

Signs: the photograph, the transcribed text, caption, context, place, date and, if you provide them, the names of the photographer and of the sign's maker. Once approved by a moderator they are public, together with your username or display name if you are signed in, or the name you typed if you are a guest. Metadata of published images (including GPS position) is removed; the original stays on private storage that the public cannot access. Do not post a recognisable face without the person's agreement.

Interactions: likes, saved signs, comments and reports (the reason and details you write). Legal basis: performing the service and our legitimate interest in moderating and protecting the site.

Security: your IP address is used temporarily to limit abuse (submissions, sign-ins, registrations) and may appear in our hosts' technical logs. Legal basis: legitimate interest.

View counts: a hashed session identifier prevents the same visit to a sign being counted twice. It does not let anyone follow the pages you view.

Third-party services

Hosting: Namecheap, Inc. (États-Unis). Transactional e-mail (password reset, management links): Resend, Inc. (États-Unis).

Automatic translation: the slogan, caption and context of signs are sent to Google Cloud Translation to produce translations, labelled as automatic. No name or e-mail address is sent.

Audience measurement (Google Analytics 4): only if you accept. We measure the public pages viewed, without URL parameters or fragments, and never account or administration pages. Google signals and ad personalisation are disabled. Google sets cookies (_ga) and receives your IP address, with possible transfers outside the European Union, notably to the United States, covered by the safeguards provided for by the GDPR.

The site's fonts and icons are served from the site itself: no call to an external font service.

Cookies and local storage

Strictly necessary, no consent needed: a session cookie and a security (CSRF) cookie, valid for about two hours of inactivity, and the memory of your chosen language. Your audience-measurement choice is kept in your browser's local storage for 180 days. Audience cookies are set only after you accept. You can change your mind at any time with "Cookie preferences" in the footer: measurement stops and accessible _ga cookies are deleted.

Retention

Account and contributions: while the account exists; deleted on request by e-mail. Guest submissions: while the sign is online or until deleted through the management link. Private originals of photographs: while the sign exists. Reports and moderation history: as long as needed to handle abuse and defend our rights, then deleted. Technical logs and rate-limit data: a short period, according to our hosts' settings. Audience-measurement choice: 180 days.

Your rights

You may request access to your data, its rectification or erasure, restriction of processing, object to it and ask for portability by writing to jugurthagaci24@gmail.com. We reply within one month. You may also lodge a complaint with the Belgian Data Protection Authority: dataprotectionauthority.be, contact@apd-gba.be.

Minors

Creating an account is reserved for people aged 13 or over.

Changes

The date of the last update is shown at the top of this page; significant changes are indicated there.