Privacy Policy
Data usage, cookies, and user rights
We attach great importance to the protection of your data. This policy explains, in a transparent manner, which information we process when you use BlabLaTeX, for what purposes and for how long, as well as the rights you have under the General Data Protection Regulation (GDPR) .
1. Who is the data controller?
The data controller is the publisher of the “BlabLaTeX” service. For any request or question related to data protection, you can use the contact form provided on this website.
2. What data do we collect?
- User account: first name, last name, email address, password (hashed), preferences.
- Service usage: LaTeX projects, uploaded files, version history, comments, compilation settings.
- Technical data: server logs, IP address, browser and device information, timestamps.
- Support: messages sent to support and associated metadata.
- Payment: information required to process the subscription via a certified payment provider (we do not store card numbers).
3. Purposes of processing
| Purpose | Legal basis |
|---|---|
| Provision of the service (collaborative editing, compilation, storage) | Performance of the contract and operation of the service |
| Account management, billing and payment | Contractual and legal obligations |
| Support and service-related communications | Legitimate interest in providing user support |
| Security, fraud prevention and service improvement | Legitimate interest in ensuring security and quality |
| Limited, non-intrusive audience measurement | Consent where required |
4. Retention periods
- Account & projects: retained for the duration of the subscription. When the subscription expires, editing/compilation is suspended; projects remain exportable for a reasonable period and are then securely deleted (or immediately upon request).
- Billing: accounting records are retained in line with applicable legal obligations.
- Technical logs: retained for a limited period proportionate to security and diagnostic needs.
5. Where is your data hosted?
Data is hosted within the European Union. We do not transfer data outside the European Union. In the event of an exception, we would apply appropriate safeguards (standard contractual clauses, supplementary measures) in accordance with the GDPR .
6. Cookies & audience measurement
We use:
- Strictly necessary cookies for the operation of the service (authentication, technical preferences) — exempt from consent.
- Limited, non-intrusive audience measurement, which can be disabled. Where required, we obtain your consent.
You can delete or block cookies at any time via your browser settings
(Settings → Privacy → Cookies).
7. Recipients & processors
We only share your data with:
- our technical providers (hosting, backups, email delivery) located within the EU or providing adequate safeguards;
- a certified payment provider to process your payments (we do not access card numbers);
- where required, public authorities in accordance with applicable law.
These recipients act on our instructions and within contractual frameworks that comply with the GDPR .
8. Security
- Encryption of communications (HTTPS/TLS);
- Hosting in secure data centres within the European Union;
- Access controls and logging;
- Regular backups and restore tests;
- Security updates and operational monitoring.
9. Your rights
You have the following rights: access, rectification, erasure, restriction of processing, objection, portability, and, where applicable, the right to define instructions regarding your data after death. To exercise these rights or make any request related to your personal data, please use the contact form provided for this purpose.
10. Contact & complaints
For any questions regarding this policy or to exercise your rights, please use the contact form available on this site.
If, after contacting us, you believe that your rights are not being respected, you may lodge a complaint with the competent supervisory authority in the European Union. For more information on your rights and how to exercise them, please consult the official GDPR page of the European Union: GDPR – Your Europe .
We may update this policy to reflect legal or technical developments. In the event of significant changes, a notice will be displayed on the site.