Legal information
Privacy policy
Data controller
Benoît Bellaïche, publisher of SignalFlick. Public contact: linkedin.com/in/benoitbellaiche.
What the site does not collect
SignalFlick has no visitor accounts, no sign-up form and no newsletter. No advertising tracker is built into the application to date, subject to the technical mechanisms of the hosting provider described below.
Searches and filters
When you search or filter, your query (keywords, category, pricing, availability in France, page) is sent to the site's own address /api/public/signals, served by the Lovable platform. These parameters also appear in the page address and may therefore be recorded in the hosting provider's logs and audience statistics. They are not linked to a SignalFlick account. In addition, a copy of your latest filters is kept in your browser's session storage, solely so the back link can restore them; this copy is not sent by the application.
Editorial data
Signals come from a private Google Sheets spreadsheet, accessed server-side via OAuth. Only the fields of published briefs are returned; no internal spreadsheet data is exposed to visitors.
Technical logs
As with any website, the hosting provider may record logs needed to deliver and secure the service, which can include IP address, requested URLs, timestamps and browser information. Their retention periods and storage locations are set by the hosting provider: see lovable.dev/privacy.
Audience analytics
The Lovable platform provides visit statistics: visitors, pages viewed, traffic sources, device type, country, session duration and bounce rate. A technical check of the published site on 7 November 2026 identified two hosting-injected scripts. The first sends page-view events to /~api/analytics, with a session identifier, timestamp, browser information, language, referring page and full page URL (which may include search and filter parameters); its code also derives a country from the browser time zone when recognised. It sets a first-party session-id cookie with a 30-minute lifetime, refreshed when events are sent. The second sends session-start, page-view and performance events to /__l5e/trackevents with session and page-view identifiers generated in memory. Automatic interaction capture is configured, but interaction events were not observed in the tested session. No replay recording was observed; this does not establish that it can never occur. These identifiers do not make the data anonymous. The retention of events on the server, access to them and any further use by the provider remain to be confirmed. See Lovable Analytics documentation and Lovable's privacy policy.
Other browser storage and fonts
The session storage used by SignalFlick also keeps the scroll position for navigation. Hosting cookies named __dpl and, in one tested session, __cf_bm were observed; their precise purposes and legal classification have not been confirmed in this audit. Newsreader, Manrope and DM Mono are served directly by this website: loading these fonts no longer requires a request to Google Fonts.
Purpose and legal basis
Two purposes are pursued. (1) Running and securing the site (delivering pages, preventing abuse): processing based on the publisher's legitimate interest (Article 6(1)(f) GDPR), subject to the conditions of that provision. (2) Audience measurement, to understand how the site is used and improve it. An audience cookie was observed being set before any consent choice. This observation is not a claim of compliance or a cookie-consent exemption under Article 82 of the French Data Protection Act. The conditions of any exemption, the appropriate GDPR basis and the need for prior consent still require assessment. No exemption is claimed, and the hosting script's consent setting alone does not demonstrate that consent has been obtained.
Your rights
Where the GDPR applies, you have the rights of access, rectification, erasure, restriction, objection and, where applicable, portability. To exercise them, contact the publisher via the profile above; requests concerning hosting logs may also need to be addressed to the hosting provider. You may lodge a complaint with the CNIL: cnil.fr.
Last updated: 7 November 2026