Privacy policy
DASHUND is published by a French business. This page is a translation provided for convenience: French law applies, and if the English and French versions differ, the French version prevails.
This policy explains what personal data DASHUND processes, for what purposes, on what legal basis, for how long, and what your rights are. DASHUND is published by Thomas Cescousse EI, a sole proprietorship registered in France, 60 avenue Jean Jaurès, 75019 Paris, France, SIREN 131 009 003 (“we”), see the legal notice. For any question or request about your data: contact@dashund.link. DASHUND has not appointed a data protection officer.
1. Who does what
| Data | Controller | DASHUND’s role |
|---|---|---|
| Accounts of customers and their members, billing, support | DASHUND | Controller |
| Use of a prototype by the people who open a test link (“testers”) | The author of the prototype (DASHUND’s customer) | Processor, under the data processing agreement |
2. People who test a prototype
When you open a DASHUND test link, your use of the prototype is measured to help its author improve it. You have no account: we know neither your name nor your email address. The data is pseudonymized: it is linked to a random identifier, not to your identity.
- Data collected: screens displayed, time spent on each one and the order in which they were viewed, clicks and their position in the prototype, screen changes, date and time; device type, browser, operating system, language and screen size; approximate country of connection; technical events (interrupted loading, page reload, display of Figma’s login screen).
- Data not collected: no name, no email address, no typed text, no keystrokes, no screen recording.
- IP address: it is only processed transiently, in memory, to determine the approximate country of connection and to limit abuse. It is never recorded in the analytics data linked to a session, nor in our logs.
- Purpose: to provide the author of the prototype with usage statistics (paths, screens, clicks, sessions, comparisons). The data is not used to identify you, to track you from one prototype or customer to another, or for advertising; it is never sold.
- Legal basis: it is determined by the author of the prototype, as controller. The system is designed to measure only the use of the prototype, without identifying people or tracking them from one prototype to another.
- Recipients: the author of the prototype and the members of their DASHUND workspace, who do not know your identity; DASHUND and its hosting provider, solely as needed to run the service.
- Retention period: depending on the author’s subscription (30 days on Free, 3 months on Solo, 6 months on Pro, with no time limit as long as the workspace exists on Business), from the date of the session; the data is then deleted automatically. It is also deleted when the author deletes their workspace.
- Figma: the prototype is displayed by Figma, in a frame embedded in the page (iframe); your browser communicates directly with Figma, which may set its own cookies in accordance with its privacy policy.
Information stored in your browser
The prototype player sets no cookies. It saves the following information in your browser’s storage:
| Item | Storage | Why | Duration |
|---|---|---|---|
| Random visitor identifier, unique to each prototype | Local storage (localStorage) | To tell a first visit from later visits to this prototype; never shared between prototypes or with another service | 13 months at most from its creation (not extended by later visits), then replaced by a new identifier |
| Session identifier | Tab storage (sessionStorage) | To group the events of a single visit; to continue the session after a page reload | Until the tab is closed |
| A/B test version (A or B) | Local storage (localStorage) | To always show you the same version when the author compares two prototypes; cannot be used to identify you | 13 months at most |
You can erase this information at any time by deleting this site’s data in your browser settings; the prototype remains usable, and your next visit is then counted as a first visit.
3. Customers and members (DASHUND accounts)
Data: email address; first and last name; company name, if provided; password in hashed form, if you chose one (never the password itself); linked Google or Microsoft accounts; workspaces, roles, invitations and ownership transfer proposals; published prototypes (structure and screen images), test links, goals and settings; history of the actions taken in a workspace (author, date, change), visible to its members; feedback and ratings left in the application; plan, billing option and payment status provided by Stripe (failed payment, unpaid). We never have access to your card numbers.
| Purpose | Legal basis |
|---|---|
| Creating and managing the account, providing the service, managing workspaces and members | Performance of the contract |
| Managing subscriptions, payment, invoicing, reminders and suspension for non-payment | Performance of the contract; legal accounting and tax obligations for invoices |
| Service emails (login, confirmation, password, invitations, ownership, payment) | Performance of the contract |
| Security of the service, abuse prevention, rate limiting | DASHUND’s legitimate interest in protecting the service and its users |
| Support and answers to your requests | Performance of the contract; legitimate interest for requests outside the contract |
| Application usage statistics: pages and features used, to know what to improve | DASHUND’s legitimate interest in improving the service; you can object at any time in your Preferences |
| Optional feedback (comments, ratings, “was this article helpful?”) | DASHUND’s legitimate interest in improving the service |
| Early tester program (inviting you by email to try new features) | Your consent, which you can withdraw at any time (“Stop being a tester”) |
Application cookies (app.dashund.link), all strictly necessary for it to work: a session cookie, to stay logged in (30 days); a cookie that remembers your time zone, to show dates in your local time; a cookie that remembers the language you chose (1 year), shared with the dashund.link website; a temporary cookie while an invitation is being accepted (7 days at most). No advertising or audience measurement cookies are used.
Application usage statistics: to know which features are used and which to improve, when you are logged in, we record the pages of the application you view and the actions you take there. Only the type of page or action is kept (for example “Flow tab of a prototype” or “target path created”), never the exact address or what you type; for filters, only their name (for example “Country”), not their value. We also record the date, your account, the open workspace and the device type (desktop, tablet or mobile). Nothing is stored on or read from your device for this purpose: everything is recorded on our own servers, with no external tool or provider. This data is only used for internal statistics; it is never sold or shared with third parties. You can object at any time in My account › Preferences › Help improve DASHUND: the measurement stops and everything recorded about you is deleted.
Figma plugin: it keeps its login token and the file link you pasted on your computer, in the storage space Figma reserves for it. It sends no data until you click “Publish”.
4. The dashund.link website
The DASHUND website does not measure its audience and uses no third-party service. It sets only one cookie, strictly necessary, when you choose a language or open the application from the website: it remembers the language you chose for 1 year. Without that choice, the language follows your browser settings; the display theme always does.
5. Providers and transfers
Our servers and databases are hosted in France, by OVHcloud. The country of connection is determined with a geolocation database installed on our servers, without the IP address being sent to any third party.
| Provider | Function | Data involved | Location |
|---|---|---|---|
| OVHcloud | Hosting of the service and data | All service data | France |
| Brevo | Sending service emails | Email address, first name, email content | European Union |
| Stripe | Subscription payment and invoicing | Account holder’s identity, payment method, invoices | European Union and United States |
| Google, Microsoft | Logging in with a Google or Microsoft account, if you choose to | Email address, name, account identifier | United States, among others |
| Figma | Displaying prototypes (third-party service used by the author of the prototype) | Data exchanged directly between your browser and Figma | United States, among others |
When data is transferred outside the European Union, these transfers are covered by the European Commission’s adequacy decision on the EU–U.S. Data Privacy Framework, for certified companies, or otherwise by the standard contractual clauses adopted by the European Commission.
6. Retention periods
| Data | Duration |
|---|---|
| Account (email address, name, company, password, linked accounts, preferences) | For the whole life of the account; deleted as soon as the account is deleted |
| Account deleted during an annual commitment | Account closed (login impossible, name and email address erased) and kept with the billing data until the end of the commitment, then deleted |
| Invoices | 10 years, with our payment provider (accounting obligation) |
| Testers’ sessions and events, a workspace’s activity history | Depending on the subscription: 30 days on Free, 3 months on Solo, 6 months on Pro, with no time limit as long as the workspace exists on Business |
| Published prototypes (structure and screen images) | Until the prototype or the workspace is deleted |
| Invitations and ownership transfer proposals not accepted | 7 days |
| Login, confirmation and reset links | 15 minutes to 24 hours depending on the link, single-use |
| Application login session | 30 days |
| Optional feedback (comments, ratings) | Detached from the account when it is deleted, then kept with no link to it |
| Application usage statistics | 13 months; deleted immediately if you object (Preferences) or delete your account |
| Visitor identifier and A/B version in the tester’s browser | 13 months at most |
| Encrypted backups of the whole service | 6 months at most; deleted data may remain in them until this period expires |
| Technical logs (no IP address) | A few days: the oldest entries are deleted automatically |
7. Security
The measures in place are described on the Security page.
8. Your rights
You can request access to your data, its rectification, its erasure, the restriction of its processing and its portability, object to processing based on legitimate interest, withdraw your consent when it is the basis of the processing, and set instructions for what happens to your data after your death. Write to contact@dashund.link: we will reply within one month, which may be extended in the cases provided for by the GDPR. If we have reasonable doubts about your identity, we may ask you to prove it.
Testers: since the author of the prototype is the controller, please contact them first. If you write to us, we forward your request to them and help them answer it. Since we do not know your identity, we usually cannot find your data from your name; deleting this site’s data in your browser erases the identifier that links it together.
Finally, you can file a complaint with the CNIL, the French data protection authority (cnil.fr).
9. Changes
We update this policy when our processing changes. Any significant change is announced in the application or by email.
Last updated: October 31, 2026.