ShredRGPDFR
Write my letter
Legal notice

Who publishes and hosts ShredRGPD

Information required by Article 1-1 of the French law on confidence in the digital economy (LCEN). This is a translation of the French legal notice.

Publisher

ShredRGPD is published by Cha4Sh, a private individual acting in a non-professional capacity. As allowed by Article 1-1, II of the LCEN, the publisher does not publish their identity; their identification details are known to the hosting provider.

Contact: x.com/Cha4Sh

Website address: shredrgpd.fr

Hosting provider

Vercel Inc.
440 N Barranca Ave #4133
Covina, CA 91723, United States
vercel.com

Personal data

The ShredRGPD application does not collect the data you type: no account, no cookie. Letters are generated in your browser. Only a cookieless audience measurement counts page views (see below).

Your browser’s local storage only keeps what you ask for, and nothing leaves it:

  • your requests, when you add them to the tracker; you can delete them from the Tracker page;
  • the steps you tick in an action plan (Check page or a breach page);
  • the date of your last visit, only if you asked to see new breaches; the “Stop showing them to me” button deletes it.

This information is only used for the features you use: that is why the site shows no consent banner. You can also delete everything from your browser settings (site data).

Like any hosting provider, Vercel may keep technical connection logs (IP address, page requested, date) to run and secure the service. The information used to pre-fill a letter (website concerned, exposed data) stays in the part of the address after the “#”, which browsers never send to the server.

Audience measurement: the site uses Vercel Web Analytics, the tool of its hosting provider Vercel, to know how many people visit it and which pages. For each page view, your browser sends Vercel, on the site’s own domain, the page address without what follows “?” or “#”, the website you came from, and general information Vercel derives from the request (country, device type, browser, operating system). According to Vercel, no cookie is used, the visit identifier is a hash computed from the request and reset every day, and you are not followed from one website to another. ShredRGPD only sees aggregated figures. To opt out, turn on “Global Privacy Control” or “Do Not Track” in your browser: the site then sends nothing; an ad blocker often has the same effect.

The password test, if you start it, contacts the Pwned Passwords service: it receives your IP address and the first 5 characters of the password’s hash, never the password itself. Details are on the About page.

Content and licences

  • List of breaches: Have I Been Pwned, under the CC BY 4.0 licence.
  • Nunito and JetBrains Mono fonts (and Inter in the share images), under the SIL Open Font License 1.1.
  • Flags of the language switch: flag-icons (Panayiotis Lipiridis), under the MIT licence.
  • ShredRGPD texts, logo and code: Cha4Sh, © 2026.
  • Source code published under the MIT licence: GitHub repository.

Liability

The letter templates are provided for information only and do not constitute legal advice. Read each letter again and adapt it to your situation before sending it. If in doubt, contact a consumer association or a legal professional.