Updated: 25 August 2026
Your data
These pages have been reviewed by no lawyer. They describe faithfully what the service does today, and on that point they bind Mizan. A legal review remains necessary before any commercial opening, and is recorded as such in the project's follow-up.
The principle, in one sentence
We keep strictly what the service needs to work, we say exactly what, and you can take it all away or erase it all from your space, without writing to us.
On a service for meeting with marriage in view, the mere fact that someone is signed up is already sensitive. That is what this page protects first.
1. What we keep
This list covers every piece of personal data the database keeps. It is reviewed at each change of the model: if a line is missing, that is a defect, and it is reported at the address in §5.
| Data | Why | Until when |
|---|---|---|
| Email address | Login identifier, and the only way to reach you | Account deletion |
| Password fingerprint | Recognise you without knowing your password | Account deletion |
| Prénom, âge, date de naissance (si vous la fournissez), genre, genre recherché, ville, pays | Profile content. The gender sought alone decides who is shown to you, and to whom you are shown: without it, no one can be proposed to you. | Account deletion |
| Marriage horizon, mobility, plans for children, kind of household | The four criteria shown at the top of a profile | Account deletion |
| Introduction text | What you write about yourself | Account deletion |
| Religion, and your relation to it — optional | Sensitive data within the meaning of article 9 GDPR. The entry form does not ask for it; it is recorded only from your space, and only if you tick the consent box. It serves only so that those for whom it matters can make it a criterion. You withdraw it by choosing « Prefer not to say ». | Account deletion, or withdrawal of consent |
| Origin, one or two — optional | Distinct from where you live. Some people make it a criterion, others ignore it. Filled in from your space, never asked on entry. | Account deletion, or clearing the field |
| Level of education — optional | On the international ISCED scale, so a qualification reads from one country to another. Serves as a criterion for whoever sets one. | Account deletion, or clearing the field |
| Verification level reached | Rules for publishing and contact | Account deletion |
| Minimum threshold you require | Filter who may write to you | Account deletion |
| Your search requirements — area, country, city, origin, religion, level of education, age, horizon, verification level | What you ask of the other person, and how much you hold to it. A requirement about religion falls under article 9 just as your own does: it is recorded only if you set that criterion, and an absent preference is not a zero requirement — it is the absence of a requirement. | Account deletion, or withdrawal of the criterion |
| Date your address was confirmed | Prove the address is yours. The confirmation link itself is never kept: only its fingerprint, and that is erased as soon as the link has served. | Account deletion |
| Open sessions | Keep you signed in for fourteen days | Signing out, expiry or deletion |
| Requests sent and received, with their text, and the closing of a conversation — its date, and who closed it | That is what the service consists of. Closing is visible on both sides: that is what sets it apart from blocking, which stays silent | Deletion of either person's account |
| Messages exchanged in a conversation, with their text and the time they were read | An accepted approach opens a thread; without these lines there is no conversation. They are readable only by the two of you, and by a moderator if one of you reports a particular message. | Deletion of either person's account |
| Décision de vérification d’identité : son résultat, sa date, son auteur, et une empreinte du dépôt | Prouver qu’une vérification a eu lieu, et à quel niveau elle vous donne droit. Ni le selfie ni la pièce d’identité ne sont conservés : ils vivent hors de la base, sont effacés dès la décision prise, et au plus tard deux heures après le dépôt. L’empreinte permet de reconnaître un renvoi identique sans garder l’image. | See §3 |
| Blocks | Make a block hold both ways | See §3 |
| Reports you have made | Moderation | See §3 |
| Log of sensitive actions | Evidence in case of a complaint, security of the service | See §3 |
| Rate counters | Prevent automated collection and harassment | One hour |
| Les événements de service dont nous vous avons informé (changement de règle, maintenance, interruption, mise à jour, nouveauté), et la date de chaque envoi | Ne vous informer qu’une seule fois par événement, et dans votre langue. Aucun contenu n’est conservé ici : seulement le fait et la date qu’un message vous a été adressé. | Account deletion |
2. What we never keep
- Your identity document. It is checked, then deleted. We keep the level reached, never the document, never a copy, never a number.
- Your password. Only an irreversible fingerprint is stored.
- Your location. No location data is collected. The city is a declaration, not a measurement.
- Your contacts. No access to the address book, on any device.
3. What outlives the deletion of your account, and why
Deleting your account erases your profile and closes your sessions, at once. Three things survive, and it would be dishonest not to say so:
- The log of actions — who published, blocked, reported, and when. It is kept anonymised: the line no longer points to anyone. Without it, no evidence would remain in case of a complaint.
- The reports about you. Without that exception, closing an account would be enough to erase the reports against you, then open another.
- The blocks you placed. A block protects someone else. Erasing it by closing your account would give the blocked person back a visibility you had refused — and they would not be told. The line remains; it no longer carries your identity.
A policy promising complete erasure while those lines survive would be a false policy.
4. Your rights, and how to exercise them without writing to us
| Right | How | Time |
|---|---|---|
| Access and portability | « Export my data » in your space: everything appears, ready to copy | Immediate |
| Rectification | Edit your profile in your space | Immediate |
| Erasure | « Delete my account » in your space | Immediate |
| Objection and restriction | Withdraw your profile from the search, without deleting the account | Immediate |
None of these rights asks for a justification, a form, or an exchange of letters. That is a choice: a right that requires writing to an address and waiting a month is not exercised.
5. Cookies and audience measurement
A single cookie is set, and only once signed in: the session cookie. It is HttpOnly — so out of reach of any script —, SameSite=Strict — so never sent from another site —, and it expires after fourteen days.
Audience measurement uses Plausible: no cookie, no personal data, no resale. We will never know who read what. A tool funded by advertising would contradict the « no advertiser » commitment shown on this site.
The list of cities offered at sign-up comes from GeoNames. That data is public and loaded from our own servers: no request goes to GeoNames during your visit, and no one there learns where you live. The attribution is cited here because the licence requires it.
6. Who can see your data
- The other people signed up: only what you publish, and only if you have published. Never your email, never the threshold you require.
- Moderation: the reports and the profiles they name.
- No one else. No data is sold, rented, shared for advertising, or passed to a third party.
Two limits, said plainly. The data is not encrypted at rest: anyone with access to the server can read it. And the log records writes, not reads: a read access leaves no trace. Both are identified in the project's threat model.
7. Hosting and transfers
No hosting is in place today: the service is not open, and no real data exists. The host, its country and any transfer outside the European Union will be written here before the first real sign-up — not after.
8. Security
- Passwords protected by scrypt, never in the clear.
- The session token is given once; only its fingerprint is stored. A leak of the database makes no session usable.
- Every query to the database goes through prepared statements.
- Search is bounded in number of results and in rate, which makes automated collection of profiles costly.
- No execution trace is returned to the browser on error.
These protections are checked by automated tests, and several of them have been proved by deliberately breaking the code to see the test fail.