Privacy Policy
Last updated: January 25, 2026
1Introduction
This Privacy Policy describes how YET ANOTHER COMPANY (hereinafter "We", "Our", "the Publisher"), as data controller, collects, uses, stores and protects data in connection with the operation of the huhu.fr website and associated services.
We are committed to complying with applicable regulations on personal data protection, including the General Data Protection Regulation (GDPR) and the French Data Protection Act.
Data controller contact:
YET ANOTHER COMPANY
120 rue Jean Jaurès, 92300 Levallois-Perret, France
Email: privacy@huhu.fr
2Data Collected
2.1 Phone Number Data
We collect and store data relating to phone numbers
- Phone numbers searched or verified
- Reports and reviews associated with these numbers
- Ratings given
- Usage statistics
- Associated metadata (date, time, report type)
This phone number data is not considered personal data under the GDPR, as it relates to phone numbers and not identified or identifiable natural persons. This data is stored indefinitely.
2.2 Personal Data of Community Service Users
For non-registered Users using the Community Service, we only collect:
- IP address (for abuse prevention and security)
- Browsing data via cookies
No personal identification data is collected for use of the Community Service.
2.3 Personal Data of Professional Users
For Professional Users who have created an account, we collect:
Identification data:
- Email address
- Password (stored hashed)
- Username (optional)
Billing data (via Stripe):
- Name/Company name
- Billing address
- Payment information
Usage data:
- Verification history
- Routine configuration
- Notification preferences
- Connection logs
2.4 Data NOT Collected
We do NOT collect:
- Identity data (first name, last name) except for billing
- Sensitive data (racial origin, political opinions, health, etc.)
- Precise geolocation data
- Data from social networks
3Processing Purposes and Legal Bases
| Purpose | Legal Basis | Data |
|---|---|---|
| Community Service | Legitimate interest | IP, cookies, reports |
| Professional Service | Contract execution | Email, password, history |
| Billing | Legal obligation | Billing data |
| Abuse prevention | Legitimate interest | IP, logs |
| Service improvement | Legitimate interest | Anonymized data |
| Statistics and analytics | Consent (cookies) | Browsing data |
4Data Recipients
4.1 Internal Access
Only YET ANOTHER COMPANY employees and contractors who need access to data as part of their duties have access.
4.2 Subcontractors
| Subcontractor | Purpose | Location |
|---|---|---|
| Stripe | Payment and billing | USA (SCCs) |
| Google Analytics | Audience analysis | USA (SCCs) |
| Microsoft Clarity | Behavioral analysis | USA (SCCs) |
| Scaleway | Hosting | France (EU) |
4.3 No Data Sales
We do not sell or rent Users' personal data to third parties.
4.4 Phone Number Data
Phone number data (reports, statistics) may be:
- Publicly displayed on the Site
- Provided via API to Professional Users
- Used to improve the Service
5International Transfers
Some of our subcontractors are located outside the European Union (particularly in the United States). These transfers are governed by:
- European Commission Standard Contractual Clauses (SCCs)
- Any other GDPR-compliant mechanism
6Retention Period
| Data Type | Retention Period |
|---|---|
| Phone number data | Unlimited |
| Professional User account | Account duration + 3 years |
| Billing data | 10 years (legal obligation) |
| Connection logs | 1 year |
| Cookies | See Cookie Policy |
7Individual Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access : obtain confirmation that data concerning you is being processed and obtain a copy
- Right to rectification : have inaccurate data corrected
- Right to erasure : request deletion of your data
- Right to restriction : request limitation of processing
- Right to portability : receive your data in a structured format
- Right to object : object to processing on legitimate grounds
- Right to withdraw consent : for consent-based processing
To exercise these rights, contact us at: privacy@huhu.fr
You also have the right to lodge a complaint with the CNIL (www.cnil.fr).
Important note: Phone number data is not personal data. The above rights do not apply to this data.
8Security
We implement appropriate technical and organizational measures to protect data:
- Encrypted communications (HTTPS/TLS)
- Password hashing
- Access control
- Regular backups
- Security monitoring
Cookie Policy
What is a cookie?
A cookie is a small text file placed on your device (computer, tablet, smartphone) when you visit a website. It allows the site to remember information about your visit.
Strictly Necessary Cookies
These cookies are essential for the Site to function and cannot be disabled.
| Cookie | Purpose | Duration |
|---|---|---|
| session | User session maintenance | Session |
| auth_token | Authentication of logged-in users | 30 days |
| csrf_token | CSRF attack protection | Session |
| cookie_consent | Storing your cookie choices | 1 year |
Legal basis: Legitimate interest (site operation)
Analytics Cookies
These cookies allow us to measure audience and analyze Site usage.
Google Analytics
| Cookie | Purpose | Duration |
|---|---|---|
| _ga | User distinction | 2 years |
| _ga_* | Session state maintenance | 2 years |
| _gid | User distinction | 24 hours |
| _gat | Request rate limiting | 1 minute |
Microsoft Clarity
| Cookie | Purpose | Duration |
|---|---|---|
| _clck | Clarity user identification | 1 year |
| _clsk | Clarity session | 1 day |
| CLID | Cross-session identification | 1 year |
| MUID | Bing/Microsoft browser identification | 1 year |
Legal basis: Consent
Payment Cookies (Stripe)
| Cookie | Purpose | Duration |
|---|---|---|
| __stripe_mid | Fraud prevention | 1 year |
| __stripe_sid | Payment session | 30 minutes |
Legal basis: Legitimate interest (payment security)
Managing Your Preferences
On your first visit
On your first visit, a banner allows you to accept or refuse non-essential cookies.
Subsequent modification
You can modify your choices at any time by clicking on the "Manage cookies" link at the bottom of each page of the Site.
Browser settings
You can also configure your browser to accept or refuse cookies:
- Chrome : Settings > Privacy and security > Cookies
- Firefox : Options > Privacy & Security > Cookies
- Safari : Preferences > Privacy > Cookies
- Edge : Settings > Privacy > Cookies
Warning: Blocking certain cookies may affect Site functionality.
Third-Party Cookies
Modifications
We reserve the right to modify this Privacy and Cookie Policy at any time. Modifications take effect upon publication on the Site. The last update date is shown at the top of the document.
Contact
For any questions regarding our use of personal data or cookies:
Email: privacy@huhu.fr
Legal Documents
YET ANOTHER COMPANY - SAS with a capital of €10,000.00 - RCS Angers 903 308 518 - VAT FR94903308518