Privacy policy

Last updated: May 23, 2026.

MyCellier is published by MINDSERSIT (SASU with €100 share capital, RCS Lyon 983 970 245, 155B rue Marcel Mérieux, 69007 Lyon, France). Processing of your personal data complies with the French Data Protection Act of January 6, 1978 (as amended) and the General Data Protection Regulation (GDPR) of April 27, 2016.

What we collect

To run the app, we collect:

• Your email address (account creation and sign-in)
• An Argon2-hashed password (never stored in plaintext)
• The items you add to your pantry
• Your preferences (zones, alerts, language, time zone)
• If you turn on push notifications: a technical identifier of your device (Web Push endpoint + associated VAPID keys)

Purposes

Your email is used to sign you in, deliver expiry alerts, and send transactional emails (verification, password reset). Your items make the app work. No data is sold, traded, or used for advertising.

Hosting and retention

Data is hosted in Europe (OVHcloud, France) and kept for the life of your account. If you delete your account from your settings, all your data is erased within 30 days, in line with our backup policy.

Your rights (GDPR)

Under the GDPR, you have the following rights over your data: access, rectification, erasure, processing restriction, portability, and objection. You can exercise them:

• Directly from your settings for most actions
• By writing to contact@mycellier.app

You may also file a complaint with the CNIL (the French data protection authority — www.cnil.fr).

Cookies

MyCellier uses a single strictly necessary cookie: cellier_session (to keep you signed in). No tracking, analytics, or advertising cookies are used. A consent banner is therefore not required.

Product analytics

To understand which pages work and where visitors drop off, MyCellier uses PostHog in cookieless mode, hosted in the European Union. Concretely:

• No advertising or tracking cookie is set on your device.
• A random anonymous identifier is stored in your browser’s localStorage so we can recognize your session across pages.
• After sign-up, that identifier is associated with your account (still no cookie). You can reset it by signing out.
• No screenshots, no session recordings, no browser fingerprinting.
• Data stays hosted in the European Union.

Governing law

This policy is governed by French law.

This is a courtesy translation. In case of discrepancy, the French version prevails.