Controller
The data controller is the site publisher. Final publisher and host details will appear on the legal notice page when published.
Optional account
You can use Doigts Magiques without creating an account: progress then stays in the browser only. An account (email/password and/or Google) is optional and helps manage learning profiles, for example for a family.
Data stored locally (localStorage)
The application stores information in the browser’s local storage, including:
doigts-magiques-v1— preferences (interface language, exercise language, keyboard layout), progress and typing statistics ;doigts-magiques.profiles.v1— local learning profiles ;doigts-magiques.history.v1— local structured history of exercise attempts ;doigts-magiques.laser-letters.v1— Laser Letters best scores ;doigts-magiques.activity-tab.v1— technical multi-tab lock for active-time tracking ;doigts-magiques.account-meta.v1— account-link / guest-snapshot metadata (no session secret) ;dm-debug-nav— debug option (only if enabled manually).
Learning history and progress
When you practise exercises, Doigts Magiques may record aggregated results so that learning progress can be followed and future displays and reports linked to the service can be prepared.
These results may include the exercise type and identifier, the date, the active practice duration (time actually spent practising, excluding idle pauses), typing speed when relevant, accuracy, the number of errors, an aggregated summary of keys or characters that caused the most difficulty, and a score or attempt status (completed, abandoned or interrupted).
The site does not record the full sequence of raw keystrokes. It also does not keep the full free text typed during an exercise. This history does not add an IP address, a device fingerprint, or detailed keyboard surveillance.
For visitors and free accounts, this history stays stored locally in the browser. For Premium accounts with sync enabled, it may also be saved on the server so it can be recovered across devices. Sync depends on the account’s active access rights.
When a subscription ends, new attempts stay local and sync stops. Results already stored on the server are not deleted automatically merely because the subscription expired. Those data are deleted when the account is permanently deleted.
Profiles may represent children; results remain attached to the account that administers them. This collection is used only for pedagogical tracking, progress, and future reports associated with the service.
Account, authentication and server storage
If you create an account, the server may store: email address, password hash (never the password in clear text), a linked Google identifier if any, and sessions.
When sync is allowed for the account (active Premium plans, including while paid access remains valid after a scheduled cancellation), the server may also keep a synchronised copy of profiles, preferences, aggregated progress, Laser Letters scores, and the structured exercise-result history described above. Visitors and free accounts do not send this sync blob or this history to the server.
Sessions use an HttpOnly cookie (and Secure over HTTPS). A non-HttpOnly CSRF cookie protects write actions. No password, OAuth token or secret is stored in localStorage.
Purpose of sync: recover learning profiles and progress across devices when the account’s rights allow it. Exact server retention periods and the precise legal basis remain to be specified by the publisher.
Google sign-in
When Google OAuth is configured, Google provides an identifier and a verified email address. A Google identity is not silently linked to an existing account merely because a similar address matches: an explicit link from a signed-in account is required.
Cookies and trackers
Technical session and CSRF cookies for the account. No advertising or audience-measurement cookies are described in the application. No cookie banner is shown while no non-essential tracker is set.
Minors
The tool is designed for educational use, including by children, usually under a parent’s or supervisor’s responsibility. The account is intended for the parent / responsible adult; learning profiles use locally chosen first names. Exercise results remain attached to that administering account.
Your choices
- continue without an account ;
- explicitly import local profiles on first sign-in ;
- sign out (guest data remain separate) ;
- request permanent account deletion (re-authentication required) — this also deletes that account’s exercise history kept on the server ;
- clear site data in the browser (including local history).
Contact and further details
- contact: contact@doigtsmagiques.com ;
- legal identity of the publisher / controller and host: see legal notice (final publication still being completed) ;
- detailed legal basis and server retention period (to be specified) ;
- DPO if applicable (to be decided) ;
- complaint procedure / authorities (to be confirmed by jurisdiction).