Privacy and access to Argos reports

Accounts and closure

Accounts are optional and disabled until their configuration is ready. If you create an account, your email address, display name, sign-in identities and sessions are stored to manage your access. Your password is stored as an Argon2id hash, never in plain text. Sign-in providers are contacted only at your initiative; Argos does not retain their tokens. The user session cookie is HttpOnly and limited to 15 minutes, renewable within a server session lasting at most 12 hours, with a 30-minute limit on inactivity in account operations. Closing your account archives it: access is revoked, but the account record, technical references and statistics are retained. Previously shared report links remain readable until their usual expiry, without extension. Neither reactivation nor automatic anonymisation is offered. Security logs containing no secrets are purged after 90 days when the next log entry is written.

Data received for an audit

The submitted URL, domain, processing dates and statuses, and technical results are stored to run the audit and display the report. The measurement browser loads the public page and its resources. Do not submit a URL containing confidential information or credentials.

Report access and sharing

You can read a report by having a link containing a token, without signing in. Anyone who has that link can read it; the operator also has administrator access. Report pages ask search engines not to index them. This instruction is neither access control nor an absolute guarantee that reports will not appear in search results.

Retention and expiry

The default period of access to reports is three years from their creation. A shorter expiry still applies if one was assigned. Expiry immediately blocks access through the link and to the associated status. An hourly task deletes expired reports and clears the internal results of their completed runs, in batches of 500. Audit, domain and run metadata are retained; this task does not delete backups. Purging may take longer if many reports expire at once or if the task is unavailable. Contact the operator to request deletion.

Measurement services and logs

Playwright and Lighthouse load the page to take measurements. The SSL Labs and Mozilla Observatory modules may send the domain name to their configured services to supplement security checks. Servers produce technical logs. The operator has set a target retention period of 90 days for these logs; whether rotation is effectively applied in production remains to be verified. Backup retention has not been confirmed. Hosting the main server in France does not describe the location of these third-party services.

Preferences and other interactions

Your theme preference may be remembered in the browser. Administrator sign-in uses a session cookie. If you subscribe to a newsletter offered by the service, your email address is sent to the backend and stored for that subscription. Email and LinkedIn links open the chosen service only at your initiative, without prefilling a report.

Usage measurement

Internal product measurement is disabled by default. If enabled, explicit consent is requested before any collection. Accept and refuse are offered together; you can withdraw your choice from “Product measurement”. The choice cookie lasts for the session and contains no visitor identifier. Only event names, predefined public pages, language, placement and error categories are counted. A consented audit is associated with its internal identifier to measure its status and the first display of its report; no submitted URL, token, email address, IP address or report content is stored in these tables. No third-party provider receives these measurements. Retention is limited to 90 days, with hourly purging. Withdrawal stops new collection from the browser; already aggregated counters and the states of previously consented audits are not reversed.

Contact and your rights

For questions or requests to access, correct or delete data about you, contact Antoine Le Louët using the details below. Avoid sending a report link in your first message. You can also consult the CNIL about your rights and how to lodge a complaint.

Signing in with Google

If you choose Google to sign in or link a sign-in method, Argos requests only the “openid”, “email” and “profile” identity permissions. Google provides a stable account identifier, your email address and its verification status, and your display name. Argos uses this information to recognise your identity, create your account on an eligible first sign-in or link Google to an existing account. No access to Gmail, Google Drive or your contacts is requested.

The Google identifier, email address, verification status and display name needed for your account are stored in the Argos database. Tokens received from Google are used to validate sign-in and are not retained. Google identity data is used to manage your account and access; it is not sent to the modules that analyse websites. When you choose this provider, Google receives the exchanges required for authentication, without receiving your report links in those exchanges.

You can remove Google as a sign-in method from your account while keeping at least one other sign-in method. This disables that method; its technical identifier, your account and analyses are retained. Closing your account archives it as described above. Contact the operator to request deletion of your data. You can also manage connections to apps in your Google Account.

Bugs, suggestions and false positives

Feedback is private and handled by administrators. The type, description and chosen page context are stored, along with optional reproduction fields for a bug. An internal report reference may be attached with your consent; a false positive also includes the finding key after access is checked. No cookie, full URL, report token or browser screenshot is stored in these tables. Status changes are recorded with the administrator’s identifier. Feedback and its history are retained for 90 days from submission, then deleted by an hourly task; backups follow their own retention period. A submission does not automatically change the score. Do not include secrets or personal data in free-text fields.

Service terms

Also read the Argos terms of use and service information.

Contact the operator

Your rights on the CNIL website (French)