top of page

Privacy Policy

A legal disclaimer

Web Abuse Association Defense (W.A.A.D.)

​

This Privacy Policy explains how the Web Abuse Association Defense (hereinafter “the Association” or “we”) collects, uses, protects, and processes the personal data of users of its website and services.

The Association is committed to complying with the GDPR, the French “Informatique et Libertés” law, and international standards regarding data protection.

​

1. Personal data collected

​

We only collect the data necessary for the operation of our services, including:

1.1. Data provided directly by the user

  • First and last name (if provided)

  • Email address

  • Content of messages sent through our forms

  • Information related to a request for help or a case (screenshots, links, testimonies, technical elements)

  • Information submitted for volunteering

  • Contact details required for donations (via a secure payment provider)

1.2. Data collected automatically

  • IP address (anonymized or not, depending on security needs)

  • Browser technical information

  • Pages visited, time spent

  • Cookies necessary for the website’s operation

We never collect biometric, medical, or financial data without legitimate necessity or explicit consent.

​

2. Purpose of data collection

​

The data is used to:

  • Process requests for assistance and support victims

  • Carry out OSINT or technical analyses related to a case

  • Transmit information, with consent, to law enforcement or our partner lawyers

  • Manage volunteers and applications

  • Ensure website security

  • Fulfill our mission of preventing online abuse

  • Manage donations and contribute to accounting transparency

  • Fulfill legal or regulatory obligations

We never sell your data and do not use it for commercial purposes.

3. Legal basis for processing

Data is processed on the following legal bases:

  • Consent (forms, volunteering, donations)

  • Legitimate interest (security, technical analyses)

  • Legal obligation (requests from authorities)

  • Vital interest in cases of individuals at risk due to severe cyberharassment, doxxing, or threats

4. Data sharing

​

We may share certain data only when necessary:

4.1. With our specialized partners

  • French and international partner lawyers

  • OSINT experts

  • Cybersecurity specialists

  • Technical services (hosting provider, payment processor)

4.2. With competent authorities

Only in severe cases or upon legal request:

  • Police / Cybercrime units

  • Gendarmerie

  • Ministry of the Interior

  • Europol, for cross-border cases

4.3. With your explicit consent

When transmitting a case file or assistance request.

No commercial sharing whatsoever.

5. Data retention period

  • Victim assistance files: as long as necessary, then deleted

  • Contact information: up to 12 months without activity

  • OSINT case files: variable duration depending on severity, limited to what is strictly necessary

  • Technical logs: 90 days

  • Donation data: according to legal accounting obligations

You may request deletion of your data at any time (see Section 8).

6. Data security

We apply strict measures:

  • Secure data storage

  • Encrypted communications (HTTPS)

  • Access restricted to authorized personnel only

  • Threat analysis and anti-intrusion protections

  • Secure deletion of sensitive files

We do everything possible to protect your data, but no system is infallible.

​

7. Cookies

​

We use only cookies necessary for the proper functioning of the website, along with anonymized audience measurement cookies.

You can manage your preferences through your browser.

​

8. Your rights (GDPR)

​

You have the following rights:

  • Right of access

  • Right to rectification

  • Right to erasure (“right to be forgotten”)

  • Right to object

  • Right to restriction of processing

  • Right to data portability

  • Right to withdraw consent

To exercise these rights:
📧 contact@webabusedefense.com

You will receive a response within 30 days.

​

9. Data transfers outside the European Union

​

Some partners (lawyers, OSINT experts, authorities) may be located in the United States or outside the EU.
These transfers are regulated:

  • through specific agreements,

  • or through the requirement of your explicit consent,

  • or when necessary to protect a victim.

10. Changes to the Privacy Policy

​

We may modify this policy at any time.
The update date will be displayed at the top of the page.

bottom of page