Last updated: 10 juillet 2026

Privacy policy

Data controller

TOKN (projet en phase de pré-lancement) — Paris, France. Contact: contact@tokn-card.com.

Data collected

Email address (required) — to notify you of the launch.
Declared country (optional) — to prioritise cohorts by geography.
Technical metadata: user-agent, truncated IP address, timestamp — logged for security (anti-abuse, spam prevention via Cloudflare Turnstile).

Purposes and legal basis

Waitlist management and launch communication: legitimate interest (Art. 6-1-f GDPR) and explicit consent (form submission).
Security and prevention of automated signups: legitimate interest.

Retention

Your email is kept until launch and then for a maximum of 12 months after you unsubscribe or the project is discontinued. Technical logs are kept for 12 months.

Recipients and processors

Hosting and database: Lovable / Cloudflare (Union européenne).
Anti-bot: Cloudflare Turnstile (token verified server-to-server, no tracking cookie set).
No data is sold to third parties.

Transfers outside the EU

We favour EU-based hosting. Any exposure to a non-EU processor is covered by the European Commission's Standard Contractual Clauses.

Your rights

Under the GDPR you have the right to access, rectify, erase, object, restrict and port your data. To exercise them: contact@tokn-card.com. You may also lodge a complaint with the French data protection authority (CNIL) or your local supervisory authority.

Cookies

This site does not use advertising cookies or third-party marketing trackers beyond what is described below. The other external calls are animation scripts (GSAP via CDN) and the Cloudflare Turnstile anti-bot widget.

Audience measurement

We use audience measurement cookies only after your explicit consent through the banner shown on your first visit:

Google Analytics 4 — visit statistics (pages viewed, referrer, device) to understand what works on the page.
TikTok pixel — measuring the effectiveness of our advertising campaigns (clicks and signups generated).

These cookies are only set after you click "Accept". You can decline at any time via the banner: none of these scripts will load. This data is used solely for audience measurement and ad optimisation — no other use, no resale to any third party.