Privacy policy

Who is responsible?

Africa Cyber Review is responsible for the processing described here. For any privacy request, write to contact@africacyberreview.fr.

Audience measurement

We measure page views and estimate daily unique visitors solely to understand which content is useful and to operate the site. This first-party measurement uses no analytics cookie, advertising identifier, fingerprint or third-party analytics service.

The IP address and browser user-agent are used transiently to update anonymous statistical counters and determine the visitor’s country locally, then immediately discarded. Only daily aggregates by page, language and ISO country code are stored. They cannot be used to identify or follow a visitor. The legal basis is our legitimate interest in measuring and securing the service; the mechanism is configured for the audience-measurement consent exemption.

Country resolution uses the local GeoLite2 database; no IP address is sent to a geolocation provider. This product includes GeoLite2 data created by MaxMind, available from maxmind.com.

Aggregates are automatically deleted after 25 months. They are not combined with other data, shared or used across websites. Global Privacy Control and Do Not Track signals are honoured.

Technical and security logs

Separately from audience measurement, our web server records an entry when a request fails (for example a timeout or a server error). These entries exist to keep the site available and to investigate attacks, not to analyse readers.

Since 7 November 2026, the IP address in these entries is truncated at write time — the last octet of IPv4 and the host part of IPv6 are removed — while User-Agent, Cookie and Referer are discarded. These truncated logs are kept for at most 180 days. A limited number of reverse-proxy error entries written before that change may contain a full IP address; access is restricted to system administrators and the system journal now deletes every entry after at most 180 days. The legal basis is our legitimate interest in service security and availability.

Cookies

The public site uses three functional preference cookies: acr-locale remembers the language you explicitly select, acr-analytics-optout records only your decision to disable audience measurement, and acr-audience-notice prevents the first-visit information notice from appearing repeatedly. They are kept for up to 12 months and are exempt from consent because they store choices you expressly request or the display state of this privacy information. Authentication cookies may be used on the restricted administration area.

How long we keep things

Daily audience aggregates

25 months, then deleted automatically

Truncated technical logs

180 days maximum, then deleted by rotation

acr-locale language cookie

12 months, stored in your browser only

Audience opt-out cookie

12 months, stored in your browser only

First-visit notice cookie

12 months, stored in your browser only

Who else sees the data

The site runs on a server hosted in France by OVH SAS, 2 rue Kellermann, 59100 Roubaix, France, acting as our processor. Beyond this hosting provider, no reader personal data is sent to any third party: there is no advertising network, social plug-in, external analytics service, content delivery network, third-party font or browser-side third-party script. Web fonts are served from our own domain. We do not sell, rent or share reader data.

No profiling, no automated decisions

We do not build reader profiles, do not track you from one site to another, and take no automated decision that produces legal effects for you or significantly affects you. Our editorial pipeline does use automated scoring and AI assistance, but it is applied to news items and published articles — never to readers. AI-assisted articles are identified as such.

Security

The site is served over HTTPS only, with a strict Content Security Policy and a hardened set of HTTP security headers. The administration area is separate, password-protected, rate-limited and excluded from search engines. Access to the server is restricted to the people who operate it.

Contact and your rights

You may ask for access, rectification, erasure, restriction, portability, or object to processing where applicable. We answer within one month. Because audience data is anonymous and no visitor identifier is retained, we cannot retrieve, correct or delete an individual audience record — there is nothing that links an entry to you. For the same reason, portability does not apply to it.

We rely on legitimate interest rather than consent for the processing described above, so there is no consent to withdraw; you may nevertheless object. Use the audience preference control on this page to opt out immediately and reversibly in this browser. We also honour Global Privacy Control and Do Not Track. Contact us at the address above. You may lodge a complaint with the CNIL or your local data-protection authority.