This English version of the Privacy Policy is provided for convenience only, to make the document easier to read for non-French speakers. Only the French version is legally binding.
Personal data collected through the Hector website (hector.gingkolab.com, hereinafter the "Website") and the Hector iOS mobile application (hereinafter the "Application") is processed by Gingko Lab, a French SARL with a share capital of 1000 euros, registered with the Bordeaux Trade and Companies Register under number 947665519, whose registered office is located at 7 Allée de Chartres, 33000 Bordeaux, France (hereinafter "Gingko Lab").
Gingko Lab can be contacted for any question relating to personal data at contact@gingko-lab.com.
When an account is created, Gingko Lab collects: email address, password (stored in hashed form), username, country and language.
This data is processed to create and manage the account, authenticate the user, and send transactional emails (email verification, password reset, email change). Legal basis: performance of the contract (the Terms of Use).
When a registered user reports a phone number, Gingko Lab records: the reported number, the nature of the report, the optional comment, the date, and the link to the author's account. The comment is publicly displayed on the Website together with its author's username.
This data is processed to power the phone number information service (verdicts, reliability indexes, public comments). Legal basis: performance of the contract for the handling of the report; legitimate interest of Gingko Lab and the public for its publication (informing the public and fighting unwanted calls).
The Website displays information about phone numbers which may, in some cases, be linked to natural persons. This information comes from: reports submitted by registered users, Website consultation statistics, and public ARCEP data on the telephone numbering plan (assignment and category of numbers).
The purpose of this processing is to inform the public about the observed use of these numbers (telemarketing, scams, legitimate calls) and to enable the filtering of unwanted calls. Legal basis: legitimate interest of Gingko Lab and of the users (article 6.1.f GDPR).
Any holder of a phone number displayed on the Website may object to this processing and request the review or removal of the information concerning them, under the conditions described in the section "Your rights".
When browsing the Website, technical data (IP address, browser type, pages visited, timestamps) is recorded in server logs. This data is processed to ensure security, prevent abuse (in particular automated reporting) and diagnose incidents. Legal basis: legitimate interest.
A session identifier, which expires after 24 hours of inactivity, is anonymized through irreversible hashing before any use. It is neither linked to the user's account nor used for tracking purposes.
Visits to phone number pages also feed aggregated statistics that contribute to the computation of verdicts. These statistics do not contain any identifier of the person who visited the page.
The Website currently uses no third-party audience measurement tool.
To determine whether an incoming call should be blocked, the Application queries a secured API using PIR (Private Information Retrieval) technology. This technology is designed so that Gingko Lab cannot learn the phone numbers being checked. Gingko Lab therefore collects neither the call log, nor the contacts, nor the numbers checked by the Application.
The table below summarizes the personal data collected by the Service:
| Data | Collected | Linked to user | Used for tracking |
|---|---|---|---|
| User id | ✓ | ✓ | - |
| Email address | ✓ | ✓ | - |
| Username | ✓ | ✓ | - |
| Password (hashed) | ✓ | ✓ | - |
| Anonymized session id | ✓ | - | - |
| User's specified country | ✓ | ✓ | - |
| User's specified language | ✓ | ✓ | - |
| Reports and comments | ✓ | ✓ | - |
No data is used for tracking purposes. The Service uses no third-party service, audience measurement tool or advertising network.
Personal data is intended for Gingko Lab. It is neither sold, nor rented, nor transferred to third parties for commercial purposes.
It may be processed by the following technical processors, within the limits of their assignments: [TO COMPLETE: hosting provider of the Website and API, specify whether data is hosted in the European Union; email delivery provider if any]. Apple also processes data related to the download of the Application in accordance with its own privacy policy.
Since published comments are public, they are accessible to any visitor of the Website.
The Website only uses cookies that are strictly necessary for its operation, which are exempt from consent:
The Website uses no advertising, audience measurement or tracking cookie. Should cookies requiring consent be used in the future, the Website would first collect visitors' consent through a dedicated banner, and this policy would be updated.
In accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act, any data subject has the rights of access, rectification, erasure, restriction of processing, objection and portability of their data.
These rights can be exercised with Gingko Lab at contact@gingko-lab.com. Proof of identity may be requested in case of reasonable doubt about the identity of the requester. Gingko Lab responds within one month, extendable by two months for complex requests.
Holders of phone numbers displayed on the Website may in particular exercise their right to object in order to request the review or removal of the reports and verdicts concerning their number, by providing evidence that they are the holder. In accordance with article 21.1 GDPR, Gingko Lab may keep the publication if it demonstrates compelling legitimate grounds overriding the interests, rights and freedoms of the holder.
These rights are reserved for natural persons: in accordance with recital 14 of the GDPR, legal persons do not benefit from them. Complaints from legal persons relating to a number are handled under the conditions set out in the section "Complaints from number holders" of the Terms of Use.
Anyone who considers that their rights are not respected may lodge a complaint with the CNIL.
Gingko Lab implements appropriate technical and organizational measures to protect personal data, including: encryption of communications (HTTPS), storage of passwords in hashed form, secured authentication cookies, and use of PIR technology for call checking without disclosure of the numbers being looked up.
This Privacy Policy is applicable as of 2 July 2026. Gingko Lab reserves the right to modify it at any time, in particular in the event of changes to the Service or to regulations. Users are invited to review it regularly.