Privacy Policy
Last updated: April 2026
1. Data controller
The controller of personal data is the publisher of the magicliste.fr website. For any question regarding your personal data, you may contact us at: contact@magicliste.fr.
2. Data collected
MagicListe collects the following data:
List creators
First name, email address, baby's/recipient's first name, event date (optional), welcome message (optional), banner photo (optional), delivery address (optional), payment details (optional).
Contributors (guests)
First name, email address (optional), contribution amount, message (optional).
Feedback
Reaction (emoji), comment (optional). No identifying data is associated with the feedback.
Technical data
Anonymized usage data is collected via Vercel Analytics and Vercel Speed Insights to improve the service (page views, load times). These tools do not set cookies and do not collect identifying personal data.
3. Purposes and legal basis
Data is processed for the following purposes:
Creation and management of gift lists — Legal basis: performance of the service requested by the user (Article 6.1.b of the GDPR).
Sending transactional emails (creation confirmation, contribution notification, access link) — Legal basis: performance of the service.
Sending milestone emails (list progress) — Legal basis: the publisher's legitimate interest in informing the user about activity on their list.
Service improvement (analytics, feedback) — Legal basis: the publisher's legitimate interest.
MagicListe does not carry out any profiling and does not use your data for advertising or commercial marketing purposes.
4. Data recipients
Your personal data is accessible to the following processors, strictly within the scope of their services:
Supabase Inc. (United States) — Hosting of the database and file storage. Data protected by the European Commission's standard contractual clauses.
Vercel Inc. (United States) — Hosting of the website and anonymized analytics. Data protected by the European Commission's standard contractual clauses.
Resend Inc. (United States) — Sending of transactional emails. Only the recipient's email address and first name are transmitted.
MagicListe never sells, rents or transfers your personal data to third parties for commercial purposes.
5. Transfers outside the EU
Some processors (Supabase, Vercel, Resend) are located in the United States. These transfers are governed by standard contractual clauses approved by the European Commission, in accordance with Article 46.2.c of the GDPR, ensuring an adequate level of protection of your data.
6. Retention period
List and item data — Retained for as long as the list exists. Users may request the deletion of their list at any time.
Contributor data — Retained for as long as the associated list exists.
Email addresses — Retained for as long as the list exists. Deleted upon request.
Feedback — Retained for 24 months, then automatically deleted.
Analytics data — Anonymized, retained according to Vercel Analytics' policies.
7. Cookies
MagicListe does not set any advertising or tracking cookies. The site only uses cookies strictly necessary for the technical operation of the service (session, magic link authentication). Vercel Analytics operates without cookies.
8. Your rights
In accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have the following rights:
Right of access — Obtain confirmation that your data is being processed and receive a copy of it.
Right to rectification — Have inaccurate or incomplete data corrected.
Right to erasure — Request the deletion of your data (deletion of your list and all associated data).
Right to restriction of processing — Request the suspension of processing in certain cases.
Right to data portability — Receive your data in a structured, machine-readable format.
Right to object — Object to the processing of your data based on legitimate interest.
To exercise these rights, send an email to contact@magicliste.fr specifying your request. We undertake to respond within 30 days.
If you consider that the processing of your data does not comply with the regulations, you have the right to lodge a complaint with the CNIL (the French Data Protection Authority) at www.cnil.fr.
9. Security
MagicListe implements appropriate technical and organizational measures to protect your personal data against any unauthorized access, loss or alteration. Data exchanges are encrypted via HTTPS (TLS). Access to data is restricted by security policies at the database level (Row Level Security).
10. Minors
MagicListe is not intended for persons under the age of 16. No data is knowingly collected from minors. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us so that we may delete it.
11. Browser extension (the Magic Button)
MagicListe offers a browser extension (Chrome, Edge), 'the Magic Button', which lets you add a product to your list in one click from any online store. The extension does not read any page, injects no script and sets no cookie.
The active tab's address (URL) is used only at the exact moment you click the extension's icon, and solely to be passed to the magicliste.fr/ajouter page in order to pre-fill your list. No data is collected, stored or shared with third parties by the extension, and no tracking of your browsing is performed.
12. Changes
This policy may be updated to reflect changes to the service or to the regulations. In the event of a substantial change, users with a contact email will be informed. The date of the last update is indicated at the top of this page.