Privacy Policy

Data Controller

ArchForm Library is a personal, non-commercial project. For questions about this privacy policy, you can contact us via the contact details available through the project.

Collected Data

ArchForm Library collects minimal personal data:

• Email address: Only for administrators who log in to the admin section. This email address is used for authentication and is not shared with third parties.
• Session data: During a logged-in session, technical data is stored to manage the session (via NextAuth session cookies).

For regular visitors who only browse the library, no personal data is collected.

Purpose of Data Processing

Personal data is used exclusively for:

• Authentication and access control for administrators
• Management of the asset library and projects
• Technical operation of the website

Retention Period

Session data is automatically deleted when you log out or when the session expires. Email addresses used for authentication are retained as long as access to the admin section is needed.

Sharing with Third Parties

Personal data is not shared with third parties. The website uses external services for technical hosting (Vercel), database (MongoDB Atlas), and file storage (Cloudinary), but these services only have access to technical data necessary for the operation of the service.

Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Access: You have the right to know what data about you is being processed.
• Rectification: You have the right to have incorrect data corrected.
• Erasure: You have the right to have your data deleted.
• Objection: You have the right to object to the processing of your data.
• Data Portability: You have the right to receive your data in a structured format.

To exercise these rights, you can contact us via the contact details available through the project.

Filing a Complaint

If you believe that the processing of your personal data is not in accordance with the GDPR, you have the right to file a complaint with the Data Protection Authority (GBA):

Gegevensbeschermingsautoriteit / Autorité de protection des données
Drukpersstraat 35 / Rue de la Presse 35, 1000 Brussels
Tel: +32 (0)2 274 48 00
Email: contact@apd-gba.be
Website: www.gegevensbeschermingsautoriteit.be

Changes

This privacy policy may be updated. The date of the last update is indicated at the bottom of this page. We advise you to consult this page regularly.

Last updated: December 6, 2025