Privacy and Cookie Policy
Last updated: October 29, 2026 · Version française
This English version is a translation of the French policy, provided for convenience. In the event of any discrepancy, the French version prevails.
1. Purpose of this policy
This policy informs users ("you") of the website economy-business-yield.com (the "Site"), published by Economy Business Yield (EBY), a French simplified joint-stock company (SAS) with a share capital of 5,000 euros, registered under SIREN number 940 115 835, with its registered office at 7 bd du Champ de Mars, 68000 Colmar, France — see our Legal notice for more details —, about how their personal data is collected, used and protected, and about the use of cookies and other trackers when browsing the Site.
This policy is established in accordance with:
- Regulation (EU) 2016/679 of April 27, 2016, known as the "GDPR";
- French Law No. 78-17 of January 6, 1978 on information technology, data files and civil liberties, as amended;
- Article 82 of that law (transposition of the European "ePrivacy" Directive 2002/58/EC);
- the recommendations and guidelines of the French data protection authority (Commission nationale de l'informatique et des libertés, CNIL) on cookies and other trackers.
2. What is a cookie?
A cookie is a small text file stored and/or read, for example, when you visit a website, view an advertisement or use an application. During its validity period, it allows its issuer to recognize the device concerned each time that device accesses digital content containing cookies from the same issuer.
Other similar technologies, in particular the browser's local storage ("localStorage"), may also be used on the Site. They are treated in the same way as cookies in this policy.
3. Who places cookies on the Site?
Cookies and trackers may be placed on your device by:
- Economy Business Yield, as publisher of the Site, for its operation, security and audience measurement;
- third parties, audience measurement providers or advertising partners, when you have consented to it.
4. The cookie management banner
On your first visit to the Site, a consent banner is displayed and allows you to:
- Accept all: allow all cookies, including those subject to your consent;
- Reject: reject all non-essential cookies — only the cookies strictly necessary for the Site to work remain active;
- Customize: choose, category by category, the cookies you want to accept or reject.
You can change your choices at any time by clicking the Manage cookies link at the bottom of every page of the Site.
Your choice is kept for a maximum of 6 months (182 days), in line with the CNIL recommendations. At the end of this period, the consent banner is shown to you again.
5. Which cookies and trackers do we use?
5.1 Strictly necessary cookies
These cookies are essential for the Site to work and to record your cookie choices. In accordance with the regulations, they are not subject to your consent and cannot be disabled.
| Name | Purpose | Issued by | Retention period |
|---|---|---|---|
| cc_cookie | Records your cookie choices (consent) | Economy Business Yield | 6 months |
| eby_contact_ts | Local storage (localStorage, not a cookie) limiting repeated submissions of the contact form (anti-spam) | Economy Business Yield | 24 hours |
5.2 Audience measurement (analytics) cookies
The Site uses Umami Analytics, an open-source audience measurement tool designed to respect user privacy. Unlike tools such as Google Analytics, Umami places no cookie or persistent identifier on your device: each visit is processed anonymously, without cross-site tracking and without creating an individual profile. IP addresses are not stored.
The statistics produced (pages viewed, traffic sources, device type, visit duration) are aggregated and anonymized. They are used only to improve the content and usability of the Site and are not shared with any third party.
Given these characteristics (no cookie, anonymized data, no cross-site tracking), this audience measurement meets the consent exemption criteria defined by the CNIL for audience measurement tools. For transparency, the Site nevertheless lets you enable or disable it from the cookie management banner.
| Name | Purpose | Issued by | Retention period |
|---|---|---|---|
| No cookie placed | Anonymized and aggregated visit statistics (pages visited, sources, visit duration) | Umami Analytics | Not applicable — no data is stored on your device |
5.3 Marketing and advertising cookies
Google Ads is used to measure the effectiveness of the Site's advertising campaigns (click and conversion tracking). This tracker is activated only after your consent has been obtained through the cookie management banner.
The Meta (Facebook / Instagram) and TikTok advertising pixels are not deployed on the Site to date. They are listed in the table below and in the cookie management banner as a precaution: any activation will remain subject to your prior consent and will lead to an update of this policy.
| Name | Purpose | Issued by | Status | Retention period |
|---|---|---|---|---|
| _gcl_* | Click and conversion tracking | Google Ads | Active (with consent) | Up to 90 days |
| _fbp | Advertising tracking and targeting | Meta (Facebook / Instagram) | Not deployed to date | Up to 90 days if activated |
| _ttp | Advertising tracking and targeting | TikTok | Not deployed to date | Up to 13 months if activated |
6. Usage tracking on the Platform (signed-in users)
When you are signed in to the Platform (app.economy-business-yield.com), we record some of your actions in our database to understand how the product is used and to improve it. This tracking only concerns signed-in users: it applies neither to anonymous visitors of the Site nor before you sign up.
The information recorded includes in particular:
- the pages viewed on the Platform and the time spent on each of them;
- certain key actions: launching an AI Diagnosis, creating a virtual portfolio, creating a price alert, adding a favorite, using the converter or the comparator, sending a message in the feedback center, and subscription-related actions (starting a payment, activating a subscription).
Technically, this tracking relies on no additional cookie: it uses the existing session cookie that keeps you signed in to the Platform. No new tracker is therefore placed on your browser. Each recorded action is linked to your internal account identifier, not to a cookie or a browser fingerprint.
This data is stored exclusively in our own database: it is not sent to any third-party audience measurement tool or advertising pixel. It is only consulted internally by Economy Business Yield, and is neither shared with nor sold to third parties.
The legal basis for this processing is our legitimate interest in improving the Platform and its users' experience (Article 6(1)(f) GDPR). This data has no separate retention period: it follows the life cycle of your account and is deleted automatically when you delete your account. You have the same rights over this data as those described in section 9 below.
7. Third-party services and resources used by the Site and the Platform
7.1 Site providers
To operate, the Site uses the following technical providers:
- LWS (Ligne Web Services): hosting of the Site, on servers located in France.
- jsDelivr (content delivery network): hosting of technical libraries used by the Site (icons, cookie consent manager).
- Formspree: processing and routing of messages sent through the Site's contact form. Formspree is a company based in the United States (see section 8 below).
7.2 Platform providers
To operate, the Platform uses the following providers:
- Stripe: processing of payments for subscriptions and credit purchases. Stripe processes these payments on behalf of Economy Business Yield and may, in this capacity, process personal data related to billing (see section 8 below and our Terms of Sale, in French).
- OpenAI and Anthropic: providers of the artificial intelligence models used by the AI Diagnosis engine. The elements sent to these models to generate a diagnosis (for example a selected cryptocurrency or an analysis profile) are processed by these providers on behalf of Economy Business Yield, as processors, and are not used by them to train their own models (see section 8 below). Anthropic also provides the model of the "Eby" conversational assistant built into the Platform, under the same conditions.
7.3 Connecting EBY to a third-party AI assistant (ChatGPT, Claude…)
If you wish, you can connect your EBY account to a third-party artificial intelligence assistant compatible with the MCP protocol (Model Context Protocol), for example ChatGPT (OpenAI) or Claude (Anthropic). This connection is never enabled by default: it only exists if you authorize it yourself.
- Authorization: the connection relies on the OAuth 2.1 standard. You sign in on the EBY Platform and explicitly approve access on our consent screen. Your EBY password is never sent to the assistant, and EBY never has access to your account with the assistant. If two-factor authentication is enabled on your account, it is required before any authorization.
- Data accessible to the assistant, only when you make a request that requires it: market data and technical analyses of crypto-assets, your charts on the "Analysis" page and their drawings, your virtual (simulated) portfolios, your price alerts, and a summary of your account (first name, sign-up date, subscription, credit balance, whether two-factor authentication is enabled). Your email address, password and payment data are never sent.
- Possible actions, at your request: create or delete a price alert; on your charts of the "Analysis" page, add drawings (marked as made by the AI), change the cryptocurrency, timeframe or indicators displayed, and delete the drawings made by the AI; save an analysis shown in the assistant as a tab of this page. The drawings you made yourself are never modified. No financial transaction can be carried out.
- Data kept by EBY: the name and redirect address of the authorized application, as well as access tokens (valid for 1 hour) and refresh tokens (valid for 90 days). Expired or revoked tokens are deleted automatically after 7 days. EBY does not receive the content of your conversations with the assistant: only the requests needed by the tools called (for example a cryptocurrency symbol, a timeframe or the drawings of an analysis).
- Revocation: you can remove access at any time from the Platform, in Settings → Applications. Access is then cut off immediately. You can also disconnect EBY from the assistant's settings.
The information that the Platform returns to the assistant at your request is then processed by the publisher of that assistant (for example OpenAI or Anthropic) under its own responsibility, in accordance with its own privacy policy. EBY has no control over that processing. The legal basis for the processing carried out by EBY is the performance of the service you request (Article 6(1)(b) GDPR). This data is not used for advertising or to train an artificial intelligence model, and is not sold.
8. Data transfers outside the European Union
The Site is hosted in France by LWS (Ligne Web Services): hosting the Site therefore involves no data transfer outside the European Union.
The Site's contact form is processed by Formspree, a company based in the United States whose servers are hosted by Amazon Web Services (AWS) in the United States. The information sent through this form (name, email, message content) is therefore transferred to the United States.
Payments made on the Platform are processed by Stripe Payments Europe, Limited, a company established in Ireland (European Union). As part of its internal organization, Stripe nevertheless involves its US affiliate, Stripe, LLC, for certain processing of personal data related to these payments, which results in a transfer of this data to the United States.
The elements sent to the AI Diagnosis engine are processed by our providers OpenAI and Anthropic, companies established in the United States. These providers contractually undertake not to use this data to train their models, but their processing nevertheless involves a transfer to the United States.
These transfers are governed by the standard contractual clauses (SCCs) adopted by the European Commission, put in place by Formspree, Stripe, OpenAI and Anthropic as processors, in accordance with Articles 44 to 50 of the GDPR.
When you connect EBY to a third-party AI assistant (see section 7.3), the information that the Platform returns to that assistant at your request is sent to its publisher, which may be established outside the European Union (OpenAI and Anthropic are established in the United States). This transfer takes place on your initiative, as part of the service you use with that publisher and under its own terms.
To date, no other data transfer outside the European Union takes place in connection with the Site or the Platform.
9. Your rights over your personal data
In accordance with the GDPR and the French Data Protection Act, you have the following rights regarding your personal data:
- right of access (Article 15 GDPR);
- right to rectification (Article 16);
- right to erasure, known as the "right to be forgotten" (Article 17);
- right to restriction of processing (Article 18);
- right to data portability (Article 20);
- right to object (Article 21);
- right to set instructions regarding what happens to your data after your death.
To exercise these rights, you can contact us at: support@economy-business-yield.com. A copy of an identity document may be requested if there is serious doubt about your identity.
If, after contacting us, you consider that your rights are not being respected, you can lodge a complaint with the CNIL (Commission nationale de l'informatique et des libertés).
10. Managing cookies from your browser
In addition to the Site's cookie management banner, you can set your browser to reject certain cookies, warn you before accepting them, or delete them regularly. Cookie settings are usually found in the "Privacy" or "Privacy and security settings" menu of your browser (Chrome, Firefox, Safari, Edge, etc.).
Please note: deleting or blocking certain cookies may affect your browsing experience and access to certain features of the Site.
11. Changes to this policy
We may modify this policy, in particular to comply with any legislative, regulatory, case-law or technical change, or to reflect the addition of new tools or services on the Site. We invite you to consult it regularly. The date of the last update is shown at the top of this page.
12. Contact
For any question about this policy or your personal data, you can contact us:
- through the contact form available on the Site;
- by email at: support@economy-business-yield.com;
- by post, at: Economy Business Yield, 7 bd du Champ de Mars, 68000 Colmar, France.