At Ac6, we are committed to protecting and respecting your privacy. This notice explains what personal data OpenSTM32.org collects, why, on what legal basis, who it is shared with, how long we keep it and the rights you have over it.
Data controller. Ac6 SAS, France. For any privacy question or to exercise your rights, use the Contact form or email webmaster at openstm32.org.
What we collect
When you create an account we collect: your username, email address, password (kept only as a secure hash), first and last name, company and country. You may optionally add a middle initial, postal address, zip code, city, state or province, phone number and distributor. When you take part in the community we store the content you post (forum messages, wiki edits, comments) under your login name. To run the site we also use a session cookie and keep standard server logs for a limited time.
Why we use it, and our legal basis
- Providing the site and the tools (your account, access to the documentation and downloads): necessary to provide the service you requested (contract or our legitimate interest in running the community).
- Security and abuse prevention (anti-spam, detecting and stopping misuse): our legitimate interest in keeping the site safe.
- Occasional information about our products and services: our legitimate interest in informing our users; you can object at any time and every such message includes an unsubscribe link.
- Cookies beyond what is strictly necessary: your consent, given through the cookie banner.
We do not sell or rent your personal data, and we do not carry out automated profiling or automated decision-making.
Who your data is shared with
- OVH (SAS, France) hosts the website and its database on our behalf, as our processor.
- Cloudflare provides the anti-bot check shown when you register (Turnstile); completing it involves your IP address being processed by Cloudflare. It is not used for advertising or cross-site tracking.
The emails the site sends you (such as registration confirmations) are sent from our own mail server; we do not use a third-party emailing provider. We put a data-processing agreement in place with our processors and share only what is necessary. We may also disclose data where required by law.
Where your data is processed
Your personal data is hosted and processed within the European Union (in France). We do not transfer it outside the EU.
How long we keep it
- Account and registration data: kept while your account is active. If you do not log in for 5 years, we notify you and then delete or anonymize the account and its registration data.
- Content you posted (forum, wiki) remains part of the community record under your login name; see erasure below.
- You can delete your account at any time (see below), which removes your personal data sooner.
Your rights
Under the GDPR you have the right to: access your data; correct it; delete it; restrict or object to its processing; receive it in a portable form; and withdraw consent where processing is based on consent. Most of this is self-service: log in and edit "My user details" to see and correct your data, or delete your account to erase it. When you delete your account we remove the personal data we hold about you; note that messages you posted on the forums remain visible under the login name (pseudonym) you chose, so please do not use sensitive information as a login name. For any request, contact us via the Contact form or webmaster at openstm32.org; we answer within one month. You also have the right to lodge a complaint with the French supervisory authority, the CNIL (www.cnil.fr).
Cookies
We use a strictly necessary session cookie (PHPSESSID) so you can log in and use account features; without it you cannot sign in. Any non-essential cookies are only set with your consent through the cookie banner shown on your first visit, where you can accept or refuse each category. You can also clear or block cookies in your browser; refusing the session cookie prevents logging in.
How we protect your data
The site is served over HTTPS. Passwords are stored only as a secure hash, never in readable form. Access to personal data is restricted to the site administrators; the database is not exposed to the internet. No transmission over the Internet can be guaranteed 100% secure, but we take reasonable technical and organizational measures to protect your information.
Links to other sites
Our pages may link to sites run by other organizations. This notice covers only OpenSTM32.org; we are not responsible for the privacy practices of other sites, so please read their notices.
Changes to this notice
We keep this notice under review and will update this page when our practices change.
This notice was last updated in July 2026.