Privacy policy
Last updated: 15 October 2026
Broadcast is a tool, open to everyone, for publishing to social networks. Each user connects their own accounts and writes their own posts. The data controller is Antoine Labbe (taraxe.com).
Data we process
| Data | Purpose | Retention |
|---|---|---|
| Email address, display name, password (PBKDF2 hash) | Creating and signing in to your account | Until the account is deleted |
| Access tokens issued by X, Meta (Facebook, Instagram), TikTok, LinkedIn and Bluesky, plus the connected account’s name or handle | Publishing on your behalf to the accounts you connected. Encrypted at rest (AES-GCM). | Until the network is disconnected or the account deleted |
| Text, links, hashtags, images and videos of your posts, and the result returned by each network | Scheduling, publishing, history | Until the post or the account is deleted |
| Session tokens (hashed), IP address on sign-in attempts and sign-ups | Keeping you signed in; limiting sign-in attempts and account creation | 30 days for sessions; one hour for attempt counters |
| X credit purchases and usage (amount, date, related post); payments are processed by Stripe and Broadcast stores no card data | Billing for publishing to X | Until the account is deleted, subject to accounting obligations |
| Invitation codes and the account that used them | Knowing who joined Broadcast through your link | Until the issuing account is deleted |
Legal basis: performance of the service you requested (GDPR article 6.1.b) and, for security, the publisher’s legitimate interest (article 6.1.f).
Recipients
The content you publish is sent to the networks you chose (X Corp., Meta Platforms, TikTok, LinkedIn, Bluesky), each processing it under its own policy. Credit payments are processed by Stripe. No data is sold or shared with other third parties. No advertising or analytics tools are used.
Hosting and transfers
Data is hosted by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) on Cloudflare D1 (database) and R2 (media), stored in the United States (ENAM region). This transfer outside the European Union relies on Cloudflare’s certification under the EU-US Data Privacy Framework.
What we do not do
We collect no data about other users of the networks, read no private messages, and use the tokens only to publish what you asked for.
Your rights
- Disconnecting a network deletes its tokens immediately (Accounts page).
- Deleting your account erases everything: networks, posts, media, sessions, invitations (My account page, “Delete my account” button). Every way to erase your data is on the Data deletion page.
- You can request access, rectification, portability or erasure of your data by writing to contact@taraxe.com; we answer within 30 days.
- You can lodge a complaint with the French data protection authority, the CNIL (cnil.fr).