Privacy Policy
Understand website and support data processing, connections to your S3 services, and how to exercise your rights.
Version: 1.1
Last updated: October 19, 2026
1. Data controller
The data controller is ALMAGESTE, 195 Route des 3 Lucs, 13011 Marseille, France.
Contact: contact@almageste.com.
2. Scope
This policy applies to:
- the s3client.com website
- data processing related to use of the S3Client software as described below
- support requests sent by e-mail.
S3Client communicates with the S3 services and credential sources you configure to perform the operations you request. These exchanges may include transferred files, their metadata, and information needed for authentication. ALMAGESTE does not collect your files or S3 credentials through the software. Processing carried out by the services you use is governed by their own privacy policies.
3. Personal data processed
We only process the following categories:
- website technical logs (for example: IP address, date/time, HTTP request, requested URL, user-agent, response status)
- support e-mail exchanges (e-mail address, message content, and optional attachments)
- if you allow audience measurement, browsing data sent to Google Analytics, including pages viewed, visit events, cookie identifiers, and browser and device characteristics.
4. Purposes and legal bases
| Category | Purposes | Legal basis |
|---|---|---|
| Website technical logs | Security, operations, abuse prevention, incident diagnostics | Legitimate interest |
| Support e-mails | Handling requests, user support, exchange follow-up | Legitimate interest |
| Google Analytics audience measurement | Understanding website traffic and usage | Consent |
We do not sell personal data and we do not use personal data for behavioral advertising.
5. Recipients
Data is accessible only:
- to authorized persons at ALMAGESTE
- to our hosting and cloud infrastructure processor: Amazon Web Services (AWS), to the extent required for hosting, security, and technical operations
- to Google, the provider of Google Analytics, for audience measurement only when you allow it. See Google’s information about data collected through sites that use its services.
6. Hosting and location
Data is hosted on AWS, primarily in the Paris region (France).
If you allow Google Analytics, Google may process data outside the European Union or European Economic Area. This processing is subject to the Google Analytics data processing terms and the transfer mechanisms they provide. Hosting the website on AWS does not therefore mean that all analytics data stays in the Paris region.
7. Retention periods
- Website technical logs: up to 6 months.
- Support e-mails: up to 6 months after the last exchange.
- Your analytics choice stored in your browser: valid for 12 months (365 days) from the date you choose, whether you accept or decline. This period is not automatically extended on subsequent visits.
- Google Analytics cookies created after your agreement: configured to expire after 180 days, without automatic renewal on subsequent visits.
The website’s Google Analytics property is configured to retain event data for 2 months and user data for 14 months. Events designated as key events also follow the 14-month period. The user data retention period resets when the user is active again, so it may be extended if you return to the website with analytics enabled. These periods are separate from cookie expiry. They do not apply to most standard reports based on aggregated data, as explained in the Google Analytics data retention rules.
Technical logs and support exchanges are deleted after their retention periods. An expired analytics choice is no longer used and will be replaced when you next choose. Exceptionally, some technical logs or support exchanges may be retained beyond these periods where strictly necessary to comply with a legal obligation or for the establishment, exercise, or defense of legal claims.
8. Cookies and audience measurement
The website does not use advertising trackers. Language and theme preferences remember your display choices.
Google Analytics loads only after you agree. Before you make a choice, or if you decline, the website sends no analytics requests to Google. Declining does not prevent you from reading the website or downloading S3Client. Advertising features and Google signals are disabled in the website’s tag.
Use Privacy preferences in the footer to allow analytics, decline, or withdraw your agreement. If you withdraw it, the website deletes its Google Analytics cookies and reloads the page without the tag. This stops future measurement; it does not automatically delete data already sent. To request deletion, contact contact@almageste.com. If browser storage is unavailable or cleared, you may be asked to choose again.
9. Security
We implement reasonable technical and organizational measures adapted to these processing activities (access control, monitoring, network security, technical logging).
For network configuration, see Configure the network and proxy.
10. Your rights
Under the GDPR and the French Data Protection Act, you have rights of access, rectification, erasure, objection, and restriction. Where processing is based on legitimate interest, you may object at any time on grounds relating to your particular situation; we will then stop the processing unless we demonstrate compelling legitimate grounds, or where processing is required for the establishment, exercise, or defense of legal claims. The right to data portability applies only to data you provided, processed by automated means, and only where processing is based on your consent or on a contract; this right is therefore generally not applicable to technical logs and support exchanges processed on the basis of legitimate interest. You can withdraw your consent to audience measurement at any time, without affecting the lawfulness of processing carried out before withdrawal. We do not use your personal data to make solely automated individual decisions that produce legal effects or similarly significant effects on you (Article 22 GDPR).
You can exercise your rights at any time via: contact@almageste.com.
We may request additional information to verify your identity when needed.
We respond within a maximum of one month from receipt of your request. This period may be extended by two additional months where requests are complex or numerous; in that case, we inform you of the extension and its reasons within one month of receipt. Requests are handled free of charge, unless they are manifestly unfounded or excessive (in particular repetitive), in which case we may charge a reasonable fee or refuse to act on the request.
You may also lodge a complaint with an EU/EEA supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement; in France, the competent authority is the CNIL: https://www.cnil.fr.
11. Policy changes
This policy may be updated to reflect legal, technical, or operational changes.
The online version indicates its latest update date.