1. Who We Are
The Iceberg Review is an independent, personal financial media project accessible at www.iceberg-review.com, publishing factual analysis on global financial markets — Macro, Crypto, ETFs, and Commodities.
The website is published by an individual, Matteo Boulogne, on a personal and non-commercial basis (see our Legal Notice for publisher details). For the purposes of data protection law, the publisher acts as the data controller for the processing described below.
We do not provide financial advice. All content is informational and educational in nature.
2. Data We Collect
Depending on how you use the website, we may collect:
- Account data: email address and password (encrypted), if you create an account
- Email address, if you subscribe to our newsletter
- Content you optionally add to your account (e.g. a personal watchlist/portfolio tracker), if applicable
- Technical and browsing data: IP address, browser type, device type, pages visited, session duration, referrer
- Cookie data (see Section 5)
We do not knowingly collect any sensitive personal data (health, political or religious opinions, etc.), and we do not sell your personal data to anyone.
Lien d'invitation et QR code
Dans le cadre de notre page d'invitation (/invitation) et du QR code associé,
nous collectons les données suivantes à des fins de mesure d'audience simple :
- Adresse IP : hachée (SHA-256 avec salage) avant tout stockage, elle n'est jamais conservée en clair
- Localisation approximative (ville, pays), déduite de l'adresse IP via un service tiers de géolocalisation (ip-api.com)
- Date et heure de la visite
Base légale : intérêt légitime (Art. 6.1.f RGPD) — mesure d'audience agrégée sans finalité de profilage individuel.
Durée de conservation : 13 mois maximum, conformément aux recommandations de la CNIL en matière de mesure d'audience.
Destinataire : ces données sont accessibles uniquement à l'administrateur du site via un tableau de bord protégé par mot de passe, et ne sont partagées avec aucun tiers.
3. How We Use Your Data — Purposes & Legal Bases
Under the General Data Protection Regulation (GDPR), each processing purpose must rely on a legal basis. Here is how your data is used:
| Purpose | Legal basis |
|---|---|
| Account creation & authentication (sign-in / sign-up) | Performance of a contract (providing you the account feature you request) |
| Sending our newsletter | Your consent, given when you subscribe |
| Audience measurement / analytics (Google Analytics) | Your consent, given via the cookie banner |
| Website security, fraud/abuse prevention (e.g. login rate-limiting) | Legitimate interest — keeping the service safe and available |
| Responding to your emails/support requests | Legitimate interest / your request |
4. Who We Share Data With
We do not sell, rent, or trade your personal data. To operate the website, we rely on the following service providers (sub-processors), which may process data on our behalf:
| Provider | Purpose | Location |
|---|---|---|
| Google Firebase (Google Ireland Ltd / Google LLC) | Account authentication and database storage (Firebase Authentication, Firestore) | EU / United States |
| Google Analytics (Google LLC) | Audience measurement, only after consent | United States |
| Namecheap, Inc. | Website & domain hosting | United States |
Where data is transferred outside the European Economic Area (notably to the United States), this is done under the safeguards provided by the recipient (such as Google's Standard Contractual Clauses / Data Processing Terms). We may also disclose data where required by law or to competent authorities.
5. Cookies
Our website uses cookies and similar technologies to operate correctly and, subject to your consent, to measure audience.
- Essential cookies — required for the website and account features to function; these cannot be disabled
- Analytics cookies — Google Analytics, used to understand how the site is used; only loaded after you accept via the cookie banner
You can accept or decline non-essential cookies via the banner shown on your first visit, and change your choice at any time using the "Manage Cookies" link in the website footer, or by clearing your browser's cookies for this site.
6. Data Retention
- Account data: retained while your account is active, deleted within 90 days of account deletion (upon your request or after prolonged inactivity)
- Newsletter data: retained until you unsubscribe, deleted promptly afterward
- Analytics data: retained for a maximum of 14 months, in line with Google Analytics' data retention settings
7. Your Rights (GDPR)
In accordance with the GDPR, you have the right to:
- Access the personal data we hold about you
- Request rectification of inaccurate data
- Request erasure of your data ("right to be forgotten")
- Request restriction of, or object to, certain processing
- Receive a copy of your data in a portable format
- Withdraw your consent at any time (for newsletter or analytics), without affecting the lawfulness of processing carried out before withdrawal
To exercise any of these rights, contact us at the email below. We will respond within one month, as required by law.
You also have the right to lodge a complaint with the French data protection authority, the CNIL (Commission Nationale de l'Informatique et des Libertés), if you believe your rights are not being respected.
8. Data Security
We rely on industry-standard security measures provided by our infrastructure providers (Google Firebase, Namecheap), including encrypted connections (HTTPS), encrypted password storage, and client-side rate-limiting on login attempts to reduce brute-force risk.
9. Children's Privacy
This website is not directed at children, and we do not knowingly collect personal data from individuals under 16. If you believe a child has provided us with personal data, please contact us so we can delete it.
10. Contact
For any question regarding this policy or to exercise your rights:
The Iceberg Review
Email: contact@iceberg-review.com
Website: www.iceberg-review.com
For details about the website publisher and hosting provider, see our Legal Notice.
11. Changes to This Policy
We may update this policy from time to time, particularly if we introduce new features, tools, or advertising. Material changes will be flagged via our newsletter or a notice on the website. The date at the top of this page always reflects the latest update.