How Frontiers handles information.

The short version

Frontiers helps people who live in France and work in Switzerland understand cross-border decisions. We collect only the information needed for the feature you choose to use. We do not ask for tax documents, identity documents, employer records, or payment details in this prototype.

• Public guides and newsroom updates are editorial content.
• Accounts, profiles, community submissions, avatars, and workspace state belong in Supabase behind access rules.
• Workspace state currently means task completion and dates a member chooses to remember; it does not include salary, employer, tax, or document data.
• Sanity is public editorial infrastructure and must never contain private member information.
• Community posts are public as soon as you write them; a moderator can remove them afterwards.

Account and community data

If you sign in, Supabase Auth handles your email address and passwordless session. Your profile can contain a username, optional display name, residence country, work canton, work stage, context-visibility preference, and optional avatar. Questions and replies are published immediately and moderated afterwards.

• Your email is not copied into public content.
• Private profile fields remain owner-only.
• Removed content is hidden from the site but its original text is retained in a moderator-only audit record.
• You can delete your own posts and comments at any time.

Measurement and providers

Frontiers records a small allowlisted set of product events to understand whether the site is useful. The event sanitizer rejects message bodies, email-like values, names, phone numbers, addresses, passwords, and long unapproved identifiers. Measurement only happens after you accept it, and you can change the choice at any time on the cookie page. The current infrastructure uses Vercel, Supabase, and Sanity for the purposes described on this site.

• Tool inputs such as salary scenarios run in the browser and are not sent to Frontiers.
• Editorial documents in Sanity are public by design.
• Service providers may process technical data needed to deliver their service.

Legal basis and your rights

Frontiers is a prototype, so the legal operator that will act as data controller is not yet named here. The final controller identity and contact details will be published on the legal notice before launch; until then, reach the team through the contact route. Consent is the legal basis for measurement, which only starts after you accept it. Account and community data are processed on the basis of the service contract and our legitimate interest in keeping the community safe.

You can access, correct, or delete your data, object to processing, and ask for a portable copy. Deletion and export are already self-service from your profile. If you live in France, you can also complain to the CNIL.

Your choices

You can permanently delete the account from your profile. Deletion withdraws and blanks your community posts, clears saved snapshots of your post text, removes your avatar, private fields, saved items and workspace state, and signs you out. Public discussions keep their shape: deleted content is repointed to a shared “Deleted account” identity, and a moderator-only audit row remains for each post without its original text. A one-way hash of your email is retained so the site refuses a new account with the same address; the address itself is not kept and no one can read the hash. For a privacy question or correction request, use the contact route; messages are private to Frontiers and there is no guaranteed response time while this prototype is being reviewed.

• Do not enter tax IDs, document numbers, bank details, or sensitive health information.
• Do not upload private documents.
• Report an incorrect or unsafe public claim through the correction path once it is available.