Skip to content
Who's Right?

Privacy policy

Last updated: October 16, 2026.

This is a translation; the French version is the one that legally applies.

This page explains what data Who's Right? processes, why, for how long, and what your rights are. The site does not ask for an account, a name or an email address to tell an argument or to vote.

Who is responsible for your data?

Christelle Chocho, sole proprietor (entrepreneur individuel), publisher of Who's Right?. Address: 28 rue de la Paix, 77170 Servon, France. Email: contact@prozissimo.com.

The golden rule: nobody should be identifiable

Never write, in a story, an update, a comment or a nickname:

  • a last name, first name or nickname;
  • an address, a phone number or an email address;
  • the name of a company, a school, a club or a specific town;
  • a social media handle or a message copied word for word;
  • any detail that could identify you, or identify someone else.

The AI helps remove this information, but it can miss some. Always read your text over before approving it. Content that makes it possible to identify a person is rejected or removed.

The data we process

  • Your arguments: your side, the other person's side, the title, the category and any updates you add.
  • Comments: the text, limited to 280 characters, and the nickname you choose. The nickname is up to you: don't use your real name.
  • Votes: the verdict chosen, and two ways of preventing the same person from voting more than once (see below).
  • Reports: the content reported, the reason, your explanation and, if you choose to provide them, your name and email address so you can be told what happens next.
  • Your private admin link: it contains a randomly generated secret code. It contains no information about you.
  • Your messages: if you write to us, we receive your email address and the content of your message. This is the only case where we know your email address.
  • Technical server logs: date and time, page requested, IP address, browser type. They are used for security and to keep the site running properly.

How we prevent duplicate votes

We use two methods together:

  • an anonymous cookie containing a randomly generated identifier;
  • a fingerprint (hash) of your IP address.

This fingerprint is calculated with a secret key (a “salt”) and a one-way mathematical function. Without that key, the IP address cannot be recovered. The IP address itself is never stored in readable form with your vote.

The fingerprint is still personal data within the meaning of the GDPR. That is why how long it is kept is limited.

Why, and on what legal basis?

  • To run the service you use: posting an argument, sharing it, voting, commenting, adding an update, deleting it. This includes the AI processing your texts to reword them, anonymize them, suggest a title and give a verdict. Legal basis: performance of the service you request, under our terms of use (Article 6(1)(b) GDPR).
  • To keep votes honest and the site safe: preventing duplicate votes and fraud, moderating content, protecting the server against abuse. Legal basis: our legitimate interest in offering reliable results and a respectful space (Article 6(1)(f) GDPR).
  • To handle reports and respond to requests from authorities. Legal basis: our legal obligations, in particular those under the European Digital Services Act (Article 6(1)(c) GDPR), and our legitimate interest.
  • To answer your messages. Legal basis: our legitimate interest in replying to you.
  • To show Google AdSense ads and measure traffic with Google Analytics. Legal basis: your consent (Article 6(1)(a) GDPR). You can withdraw it at any time.

How long do we keep your data?

  • Arguments, updates, comments and votes: as long as the argument is online. The content stays posted as long as its author does not delete it, unless it is removed by moderation.
  • Argument deleted by its author: the text is erased immediately, along with its updates, comments and votes.
  • Content removed by moderation: kept offline for 12 months at most, to respond to a challenge or a request from authorities, then erased.
  • Vote fingerprints and the anti-duplicate-vote cookie: 13 months.
  • Reports: 12 months after they are handled.
  • Messages sent by email: as long as needed to handle your request, then 12 months at most.
  • Technical server logs: 30 days.
  • Database backups: these are renewed automatically. Erased data disappears from them within 30 days at most.

Who receives your data?

We do not sell your data. At Who's Right?, only the publisher has access to it. We use service providers, each for a specific task.

  • OVH SAS hosts the site and its database, on a server located in France.
  • Anthropic provides Claude, the AI used by the site. Anthropic receives the texts you submit (arguments, updates, comments) to reword them, anonymize them, suggest a title, moderate them and give a verdict. Only the text is sent: not your IP address, not the vote fingerprint, not the cookie.
  • Google provides the consent management tool, AdSense advertising and Google Analytics traffic measurement. The consent tool loads when you arrive on the site, to ask you the question: your browser then contacts Google's servers. AdSense and Analytics are only activated after you agree. Google then processes this data under its own rules: see Google's privacy policy.
  • Authorities may receive data when the law requires us to provide it.

Data processed outside the European Union

Anthropic is a company based in the United States. The AI processing of your texts may therefore take place on servers located outside the European Union. These transfers are covered by the safeguards provided by the GDPR, in particular the European Commission's standard contractual clauses. Under its commercial terms, Anthropic does not use these texts to train its models. It may keep them for a limited time, under its own rules, in particular for security purposes.

Google may also process data outside the European Union, with the safeguards provided by the GDPR.

Your argument itself, once saved, is stored on our server in France.

Essential cookies (no consent needed)

  • Anti-duplicate-vote cookie: an anonymous identifier, set when you vote. It is used only to prevent the same browser from voting twice on the same argument. It is essential to the vote you request. Duration: 13 months.
  • Consent choice cookie: it records your choices, so you are not asked again on every page. It is set by Google's consent tool. Duration: 13 months at most.

Cookies set only with your consent

  • Traffic measurement (Google Analytics): counting visits and page views, to improve the site. The Google Analytics tag is only loaded after you agree. Duration: 13 months at most.
  • Advertising (Google AdSense and its partners): showing ads, measuring their effectiveness and, if you accept, personalizing them. The list of advertising partners is shown in the consent window. Duration: 13 months at most.

The consent window is managed by Google's tool, which applies the European consent framework TCF v2.2. If you decline, the site remains fully usable. Ads may still appear, but they are not personalized based on your browsing.

Changing your mind about cookies

You can change or withdraw your choice at any time with the “Manage my cookies” link at the bottom of every page. You can also clear cookies in your browser settings.

Deleting your argument

You can delete your argument at any time with your private admin link. The text is erased immediately. Keep this link to yourself: anyone who has it can manage your argument.

Lost your link? Recognize yourself in a story? Write to us from the Contact page, or use the “Report” button.

Your rights

Under the GDPR, you have the right:

  • to access your data;
  • to have it corrected;
  • to have it erased;
  • to object to its processing;
  • to request that its processing be restricted;
  • in certain cases, to receive it in a readable format (portability);
  • to withdraw your consent at any time, without affecting what was done before.

To exercise these rights, write to contact@prozissimo.com, putting “Tort ou Raison” or “Who's Right?” in the subject line. Since the site has no accounts, we don't know who you are. To find your data, give the address of the page concerned (argument or comment) and any useful information. We will reply within one month at most, as provided by Article 12 of the GDPR.

If you believe your rights are not being respected, you can file a complaint with the CNIL (Commission nationale de l’informatique et des libertés, the French data protection authority): cnil.fr/fr/plaintes, or by mail at 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.

Minors

If you are under 15, ask a parent for permission before using the site and before accepting cookies. No story may make it possible to identify a child.

Changes to this page

This page may change, for example if the site adds a service. The date at the top of the page shows the last update.