Last updated: October 2026
1. Introduction
World-Debrid is committed to protecting the privacy of your personal data. This policy describes how we collect, use and protect your information.
2. Data collected
We collect the following data:
- Informations de compte : Nom d'utilisateur, adresse email, mot de passe crypté
- Données d'utilisation : Historique de débridage, statistiques d'utilisation
- Informations de paiement : Données de transaction (via Stripe sécurisé)
- Données techniques : Adresse IP, type de navigateur, système d'exploitation
3. Data use
Your data is used to:
- Provide and improve our debrid services
- Manage your account and subscriptions
- Process your payments securely
- Communicate with you about your account
- Prevent fraud and ensure security
4. Data protection
We implement technical and organizational security measures:
- SSL/TLS encryption for all communications
- Password hashing with bcrypt
- Protection against SQL injections and XSS
- Restricted access to personal data
- Regular and secure backups
5. Data sharing
We do not sell or rent your personal data. Your data may only be shared with:
- Stripe : Pour le traitement des paiements
- Hébergeurs : Pour le débridage de liens
- Trustpilot: To invite you to leave a review (email address and first name or username)
- Autorités légales : Si requis par la loi
6. Your rights
In accordance with GDPR, you have the following rights:
- Droit d'accès : Consulter vos données personnelles
- Droit de rectification : Corriger vos données inexactes
- Droit à l'effacement : Supprimer votre compte et vos données personnelles. Certaines données survivent à la suppression, pour la durée indiquée dans Durées de conservation : connexions (1 an), registre anti-fraude (12 mois), pièces comptables (10 ans).
- Droit à la portabilité : Recevoir vos données dans un format structuré
- Droit d'opposition : Vous opposer au traitement de vos données
7. Retention periods
We keep your data for as long as it is needed for its purpose, then delete it:
- Account: as long as it is active. After it is deleted, your username, email and sign-up IP address are kept for 12 months in an anti-fraud register, then erased.
- Connection logs (IP address, date and time, browser): 1 year, including after the account is deleted, under our legal retention obligations.
- Debrid history: 12 months, then anonymised: only statistical data remains, with no link, file name or IP address.
- Browser fingerprint: 90 rolling days.
- Accounting records (payments): 10 years, as required by the French Commercial Code.
- Content notices: 1 year after they are handled.
8. Legal retention and requests from authorities
Connection data is kept so that we can respond to requests from judicial authorities. It is disclosed only to those authorities, within a legal procedure.
To report protected content, see our Report content page.
9. Cookies
We use essential cookies for:
- Maintain your login session
- Remember your language preferences
- Ensure the security of your browsing
10. Contact
Pour toute question concernant cette politique ou pour exercer vos droits, contactez-nous via notre formulaire de contact.
Browser fingerprint (anti-fraud)
At signup and on every login, we collect and hash a combination of technical signals from your browser (canvas, WebGL, installed fonts, timezone, screen resolution, hardware configuration, ISP ASN). These signals are converted into an irreversible fingerprint used exclusively to detect fraudulent multi-account creation. Legal basis: legitimate interest (GDPR article 6.1.f). Retention: 90 rolling days. You may request deletion of your fingerprint by contacting us. The related connection logs (IP address, date, browser), however, are kept for 1 year: see Retention periods.