Privacy policy

The controller of the data collected on millenage.com is Sami Haddad, 98 avenue du Maréchal de Lattre de Tassigny, 94320 Thiais, France. The controller can be reached at contact@millenage.com.

• As little as possible: we only ask for what changes the result.
• Said plainly: every piece of data is written here with the reason it is taken.
• Protected: the site is served over encrypted HTTPS, and access to data is restricted.
• Kept only as long as useful: after that period, the data is deleted. The periods are in article 8.
• Never sold: your data is neither sold nor rented to anyone.

3.1 Your answers to the two questionnaires

To trace your past, you give your region or country of birth, your skin tone and, if you wish, your first name; then, for your parents, grandparents and great-grandparents, their region of birth and, if you know them, their first and last names, as well as the skin tone of your parents and grandparents.

To project your future, you answer a second, longer questionnaire. Ten answers are required: your place of birth, your level of education, how many cities you have lived in since you were 18, whether you have lived more than six months outside your country, whether you learned a language after 20, your housing situation, whether you care for a child or relative, whether your work could be done elsewhere, where your close ones live, and an order of priorities. Five remain optional: where you live today, the languages you speak, your skin tone, whether a parent or grandparent was born elsewhere, and whether you have close family settled abroad.

In both cases, these answers are used to compute your simulation, on the basis of performance of the contract for a paid plan (art. 6.1.b GDPR) and of legitimate interest for the free preview.

They are sent to the computation engine for the time needed to produce your result, then are not kept on our servers. A copy stays in your browser's storage to re-display your results: the future one disappears when you close the tab, the past one when you clear your browser.

If you have an account, your latest lineage (the result, not your answers) is also saved to that account, so you can find it again from one device to another. It is replaced with each new result, you can export or delete it whenever you like, and it goes with your account.

3.2 Your email address

It is taken when you create your account. It identifies you, it ties your purchases to your account so you can find them on any device, and it receives the confirmation of your purchases: this rests on performance of the contract (art. 6.1.b GDPR). After a purchase, it also receives Millenage's monthly letter, unless you ticked “I don't want to receive Millenage's monthly letter” when creating your account: a customer may receive news about offers similar to what they bought, provided they can refuse it when giving their address and in every issue (art. L34-5 of the French Postal and Electronic Communications Code). Without a purchase, you only receive it if you ask for it in “My account”: this rests on your consent (art. 6.1.a GDPR). Every issue has a link to unsubscribe.

3.3 Your payment

Your bank details are processed only by Stripe Payments Europe Ltd, in Dublin. Millenage never has access to them. Stripe is PCI-DSS Level 1 compliant and publishes its own policy: stripe.com/privacy.

3.4 Technical data

To protect the service from abuse, calls to the computation are associated with your IP address for a short time. These records are deleted automatically after thirty days, on the basis of the legitimate interest in securing the service.

3.5 The two files you can upload

Some plans let you upload, if you wish, a family tree exported from a genealogy site (GEDCOM file). It is read only to extract your ancestors' places of birth to narrow the simulation, then it is not kept.

You can also upload the results file of a commercial DNA test, to compare your estimate with what that test measured.

A DNA test file is genetic data. European law places it among the special categories of data (art. 9 GDPR). This upload is therefore optional and happens only at your explicit request: the file is analysed to produce the comparison, then is not kept on our servers, and is never sold or shared. The legal basis is your explicit consent (art. 9.2.a GDPR), given by the act of uploading the file. You can use Millenage fully without ever providing genetic data.

The site uses only what it needs to work, which requires no consent (art. 82 of the French Data Protection Act):

• a session cookie, set by our servers, signed and unreadable by the page's scripts, which carries your session and the plan you have unlocked;
• your browser's storage, which keeps your session, the unlocked plan, your language and the copy of your results;
• Stripe's cookies, set at the time of payment and governed by its policy.

There is no third-party audience measurement tool, no advertising cookie and no tracker.

Five technical providers, and no one else. Transfers outside the European Union are framed by the European Commission's standard contractual clauses.

• Vercel (United States): hosts the site.
• Railway (United States): hosts the computation engine. Your answers, and an uploaded file where applicable, pass through it for the time of the computation and are not kept there.
• Supabase (United States): holds accounts (email, purchases, and your latest saved lineage if you are signed in).
• Stripe (Ireland, European Union): processes payments.
• Resend (United States): sends confirmation emails and the newsletter.

European law gives you the right to obtain a copy of your data, to have it corrected, to have it erased, to restrict its processing, to retrieve it in a format readable elsewhere, to object to its processing, and to withdraw your consent for the newsletter. You can also lodge a complaint with the CNIL (cnil.fr).

To exercise any of these rights, write to contact@millenage.com saying what you are asking for. You will receive a reply within a month. For the newsletter, the unsubscribe link at the bottom of every email is enough; the unsubscribe page also works when you are signed in to the account that holds the address.

The whole site is served over encrypted HTTPS. Sensitive calls to the computation are authenticated with signed keys, and the number of requests is limited to contain abuse. Data is stored with certified hosts, and only the data controller has access to it.

The measure that matters most is still the first one: your answers to the form are not kept on our servers. The only exception is your latest lineage if you have an account, which you can export and delete at any time.

Four of the five providers (Vercel, Railway, Supabase and Resend) are established in the United States. These transfers are framed by the standard contractual clauses approved by the European Commission, supplemented by security measures such as encryption and, for certified providers, by their membership of the EU–US Data Privacy Framework.

This policy may be updated to follow regulation or a technical change. A substantial change is announced by email to newsletter subscribers, and shown prominently on the site for at least thirty days.