Who is responsible
Makers Wall is run by Maxime Bertonnier, who is the data controller for the information described here. He is an individual based in France; Makers Wall is not a registered company and isn’t run to make money. You can reach us at m.bertonnier@gmail.com.
What we store and why
| Part | What | Why |
|---|---|---|
| Account | Email, display name, handle, and either a password (stored only as a one-way hash, never readable) or the ID GitHub or Google gives us when you sign in with them. Single-use tokens for email verification and password resets, also hashed. | To create your account and let you sign in securely. |
| Profile | Everything optional you add: picture, solo or team, what you do, languages, bio, location, timezone, links (website, X, GitHub, LinkedIn), and the devices you can test on. Badges we award, like founding member. | To show other makers who they're working with and to match tests to the devices you have. |
| Projects | Name, tagline, description, URL, favicon and cover image (fetched from your page or uploaded), platforms, tags, language, the public brief, the private brief and access link, the testing window and the number of testers you want. | To list your project and brief the people who test it. |
| Tests | Claims and claim requests (with any note or decline reason), the dates and state of each test, reports (summary, time spent, devices used, findings with screenshots and video links), chat messages and attachments, and problem reports sent to us. | To run each test from claim to rating, and to step in when something goes wrong. |
| Ratings & reputation | Stars, tags, a private note and an optional public note for each rating, plus the scores we compute from them: tester and maker averages, completed tests, missed deadlines, your credit balance and its history, and your projects' place on the wall. | To reward good testing and decide who gets tested next. |
| Notifications | The notifications we send you, whether you've read them, which ones went out by email, and the kinds you've muted. | To keep you informed the way you chose. |
When you add a project, our bot (“MakersWallBot”) fetches that public page once to read its title, description and images. It doesn’t log in or follow links.
We use a single cookie that keeps you signed in. It’s strictly necessary, can’t be read by scripts, and expires after 7 days. Right after some actions (signing up, publishing or pausing a project...), a second short-lived cookie carries that event to our analytics; it holds no identifier and is deleted as soon as it’s read, or after 10 minutes.
Our legal bases
- Running the service you signed up for (contract): your account, profile, projects, tests, reports, messages, ratings and notifications.
- Legitimate interest: keeping the platform secure, preventing abuse and rating manipulation, fixing errors, and understanding where new makers come from and how the product is used (cookieless analytics, below).
Who can see what
- Everyone, including visitors who aren’t signed in: your public profile (name, handle, picture, bio and the other profile details you fill in, badges, scores and public rating notes) and your published projects with their public brief.
- Only testers who claim your project: the private brief and access link.
- Only the maker and the tester of a test: its chat, attachments and report, and the private note attached to each rating. Ratings stay hidden until both sides have rated or the rating window closes.
- Us: we access data only to run the service, answer a problem report or investigate abuse.
Services we rely on
These companies process data on our behalf, only for the purpose listed:
- Resend: sending emails (verification, password reset, notifications).
- Railway (storage buckets): storing pictures, screenshots and videos you upload.
- Railway: hosting the website, API and database.
- Sentry: error reports from our server, so we can fix bugs.
- GitHub and Google: only if you choose to sign in with them.
- Umami: usage statistics (below). We run it ourselves on Railway, so no analytics company sees them.
- Deskcord: the support chat on every page. Messages you send through it are delivered to our Discord server.
Some of these providers may process data outside the European Economic Area. When they do, they rely on safeguards such as the European Commission’s standard contractual clauses.
Analytics
We use Umami to see which pages help people and where they get stuck: the pages you visit, the buttons and links that matter (for example “Claim this test” or a step of the submission form), and outcomes such as signing up, publishing a project or submitting a report. It records the page, referrer, browser, device type and country. It sets no cookies, stores nothing on your device and doesn’t keep your IP address. What you type (reports, messages, emails) is never sent to it.
Signed out, you’re anonymous: Umami can’t recognise you on another day or another site. Signed in, your visits are linked to your account’s internal ID (never your email or name), so we can see how members use the product over time. Private links and identifiers in addresses (claim links, project and test pages, email links) are blanked before anything is sent.
There’s no consent banner because nothing is stored on your device. If you’d rather not be counted at all, a content blocker will stop the script, or write to us and we’ll delete the analytics linked to your account.
How long we keep it
- Account data: as long as your account is open.
- Usage statistics: 3 years.
- Verification and reset tokens: they expire within 72 hours and 2 hours.
- After you delete your account, we delete your profile and personal details within 30 days. Reports, messages and ratings you exchanged with other makers are kept for them, with your name removed.
Your rights
You can ask to access, correct, export or delete your data, to restrict or object to how we use it, and to withdraw consent. Most profile details can be edited directly in Settings; for everything else, write to m.bertonnier@gmail.com. We answer within a month.
If you think we’ve got something wrong, you can complain to your data protection authority. In France, that’s the CNIL (cnil.fr).
Age
Makers Wall is not for anyone under 16, and we don’t knowingly collect their data.
Changes
When we store something new or use data in a new way, we update this page and change the date at the top. If the change matters, we’ll tell you by email or in the app first.