Skip to main content

Privacy Policy

Last updated: March 2026

1. Data controller

The controller of the personal data collected through Padlie is:

  • Company: Yellow Bear (SARL / EURL)
  • Manager: Alexandre Levacher
  • Contact: hello@padlie.com

2. Data collected

When you create an account and use Padlie, we collect:

  • Account data: email address, first name, last name, preferred language (optional), gender (optional), profile picture (optional)
  • Authentication data: password hash (never the password in plain text) or Google OAuth identifier if you choose that option
  • Session data: session token stored in a secure cookie (duration: 60 days)
  • Usage data: anonymized interaction events (pages visited, features used) via Google Analytics 4 (Google Tag Manager)

3. Purposes of processing

  • Service delivery: authentication, access to planning features, sharing workouts
  • Communication: sending transactional emails (email address confirmation, password reset)
  • Product improvement: anonymized usage analysis to identify areas for improvement

4. Cookies

Padlie uses the following cookies:

Session cookie

Required for the service to work — keeps you signed in for 60 days. Cannot be disabled without logging you out.

Language cookie

Functional — remembers your language preference (French, English, Spanish).

Analytics cookies

Set by Google Analytics 4 via Google Tag Manager (_ga cookies) — measure audience in a pseudonymized way, for statistical purposes only. Duration: up to 13 months.

Padlie does not use advertising cookies. Analytics cookies (Google Analytics 4) collect pseudonymized data for statistical purposes only.

5. Third-party services

Padlie relies on the following processors to deliver the service:

  • Vercel Inc. — hosting of the website and the application
  • Neon Inc. — database hosting
  • Google (Analytics 4, Tag Manager) — audience measurement (pseudonymized data)
  • Google — optional OAuth authentication
  • Loops — sending transactional emails

These providers process your data solely within the scope of their assignments and are bound by confidentiality obligations.

6. Data retention

  • Account data: kept until the account is deleted, which you can do at any time from the application settings
  • Analytics data: in accordance with the Google Analytics policy (pseudonymized data, configurable retention)

7. Your rights (GDPR)

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

  • Right of access: obtain a copy of your data
  • Right to rectification: correct inaccurate data
  • Right to erasure: delete your account and your data (available directly in the application)
  • Right to portability: receive your data in a structured format
  • Right to object: object to certain processing

To exercise your rights, contact us at hello@padlie.com. We respond within a maximum of 30 days.

If you believe your rights are not being respected, you can lodge a complaint with the CNIL (the French data protection authority) — cnil.fr.