MotePrivacy
Mote
01 Why 02 Mote Web 03 Modes 04 Index 05 Plates 06 Film 07 Download
The app What’s new Account FR / EN
Privacy

The site keeps as little as possible. No ads, no selling your address, no tracking cookie.

01 Controller

The data controller is the publisher of this site (see Legal notice). For any question about your data: [email protected].

02 Account

An account does one thing: tells you when Mote changes. The site records:

  • your email address;
  • your password, never in plain text: only its hash (scrypt with a salt unique to each account);
  • the language of the emails (French or English);
  • whether you want new versions by email, and whether your address is confirmed;
  • the date the account was created.

Legal basis: providing the service you ask for by creating the account.

Retention: as long as the account exists. You can delete it yourself at any time from the Account page (“Delete my account” button): the account, its sessions and its pending links are erased at once, along with any account-free news subscription using the same address.

03 News without an account

The “Tell me about new versions” form records your email address, the language and the date. The subscription only becomes active once you click the confirmation link sent by email.

Legal basis: your consent. An address that is never confirmed is erased after 30 days.

Unsubscribing: every announcement email has an “Unsubscribe” link that erases the address at once. With an account, you can also untick the option on the Account page.

04 Emailed links and sessions

To confirm an address or change a password, the site creates a single-use link: it lasts 48 hours (confirmation) or 2 hours (password) and is erased as soon as it is used.

When you sign in, the site creates a 30-day session, erased when you sign out. Expired links and sessions are erased automatically every day.

05 Cookies and browser storage

The site uses no tracking or analytics cookie. It sets two at most, both necessary:

  • “session”: only if you sign in; keeps you signed in for 30 days. Not readable by page scripts (HttpOnly), only sent over an encrypted connection online.
  • “lang”: only if you click FR / EN; remembers your language for a year.

The animations also remember, for the length of the visit (the browser’s session storage), whether the loading screen has already been shown. This stays in your browser and is never sent.

06 Visit statistics

The site counts page views and downloads, without cookies. For each visit it records: the page, the type of event, the date, the site language, the country, the site you came from (its domain name only), the type of device (computer, tablet, phone) and, for a download, the version number.

To count the visitors of a given day without tracking them, it computes a fingerprint from your IP address, your browser and a random number that changes every day and is never stored. Neither the IP address nor the browser is kept; the next day, the fingerprint can no longer identify anyone.

The country comes from the host (when it provides it) or, failing that, from the language set in your browser.

Known bots are not counted. Legal basis: the publisher’s legitimate interest in knowing how the site is used. Retention: 13 months, then automatic deletion.

07 Mote Web

The “Mote Web” demo computes the image in your browser: your photo is never sent to the site.

08 Service providers

  • Hosting of the site and its database: Hetzner Online GmbH, server in Germany. The site’s server keeps no log of visits: your IP address is not recorded there.
  • Sending emails: Resend (resend.com), a company based in the United States. It receives your email address and the message content in order to send it. Transfers outside the European Union are covered by Resend’s data processing agreement, which includes the European Commission’s standard contractual clauses.
  • Downloads: the “Download” button sends you to GitHub, which serves the installer. GitHub then receives your connection as on any of its sites.
  • Network and videos: Cloudflare, Inc., a company based in the United States. Every connection to the site goes through Cloudflare, which therefore receives your IP address to route the pages, protect them against attacks and report the country of the visit; the videos are stored on Cloudflare R2. Cloudflare is certified under the EU–US Data Privacy Framework and applies the European Commission’s standard contractual clauses.

No data is sold or lent to anyone.

09 Your rights

You can access, correct and erase your data, object to its processing or ask for a copy:

  • on the Account page: see your address, change the language and the news option, change your password (“Forgot your password?” link), delete your account;
  • through the “Unsubscribe” link in every announcement email;
  • for anything else, by writing to [email protected].

If you think your rights are not respected, you can lodge a complaint with the CNIL (cnil.fr), the French data protection authority, or with the authority of your country.

10 Updates

Page last updated on 9 November 2026.

Legal notice →

Colophon — set in Inter Tight. Images: freely licensed photos (Unsplash, Pexels, Wikimedia Commons, Flickr), screened in Mote. Photo credits Effects · Account · What’s new · Releases · Legal notice · Privacy akpic · 2026