Privacy policy

Compliant with the GDPR (EU 2016/679) and the Data Protection Act 2017 (Mauritius) · Last updated: 2 July 2026

1. Data controller

The data controller is Stellar Blue Ltd, a private limited liability company under Mauritian law (no. 233140), whose registered office is located at Bureau 215, Block B, Junction, Calebasses, République de Maurice. Although established in Mauritius, the company undertakes to comply with the General Data Protection Regulation (GDPR, EU 2016/679) as well as the Mauritian Data Protection Act 2017. Contact: map.moris.insider@gmail.com.

2. What data is collected?

We only collect what is strictly necessary:

• Audience measurement (Google Analytics 4, Microsoft Clarity): pseudonymised browsing data, enabled only after your consent via the cookie banner — you can refuse without consequence and withdraw at any time via "Manage cookies".
• Premium waiting list: if you leave your email address on the Premium page, it is kept to notify you of the launch (form hosted by Netlify).
• Optional app account (app.morisinsider.com): login email (magic link, no password), language, and synced data (planner, journal, favourites) hosted by Supabase (European Union — Ireland). Without an account the app remains fully usable: your data then stays on your device.
• Email communications: if you ticked the dedicated box (opt-in), we may send you news and offers via our provider Brevo; every email contains a one-click unsubscribe link. Sends are logged to avoid duplicates.
• Anonymous counters: the app feeds aggregated counters (sessions, language…) with no identifier and no cookie — no personal data.

Premium payment (once sales open): it will be handled by a secure payment provider; we will never have access to your card number.

3. Purposes and legal bases

• Providing the service and the application: performance of the contract / legitimate interest.
• Audience measurement and improvement: consent.
• Payment management and accounting obligations: performance of the contract / legal obligation.
• Waiting list and commercial communications (news, reminders): consent — withdrawable at any time via the unsubscribe link in every email.
• Optional account and multi-device sync: performance of the contract.

4. Cookies

The site uses audience measurement tools (Google Analytics 4 and Microsoft Clarity), enabled only after your consent via the cookie banner. You can refuse without consequence and withdraw your consent at any time via the Manage cookies link in the footer. No advertising cookies are used.

5. Retention period

Data is retained only for as long as necessary for the above purposes, and for a maximum of three (3) years from your last contact, unless a longer legal obligation applies (e.g. audience measurement data: 25 months maximum; accounting and tax data: applicable legal period).

6. Recipients and transfers outside the EU

Your data may be processed by our technical processors: Netlify (hosting, forms), Google (GA4 audience measurement), Microsoft (Clarity), Supabase (accounts and sync, hosted in the EU — Ireland) and Brevo (email delivery, EU). Some may be located outside the EU (notably in the United States); such transfers are covered by appropriate safeguards (European Commission standard contractual clauses).

7. Your rights

In accordance with the GDPR, you have the right to access, rectify, erase, restrict, object to and port your data. To exercise these rights: map.moris.insider@gmail.com. You may lodge a complaint with the CNIL (France), the supervisory authority of your country of residence in the EU, or the Data Protection Office (Republic of Mauritius).

8. Minors

The service is not intended for persons under the age of 15 without the consent of their legal representative.