Skip to content
LOGOEJA
Sign in
← Back to home

Privacy policy

Updated on 31 October 2026

This policy explains what personal data the platform collects, why, how long it is kept and how to exercise your rights. It applies Senegalese Law No. 2008-12 of 25 January 2008 on the protection of personal data.

Data controller

Enda Jeunesse Action (EJA), [to be completed: address], Dakar, Senegal. Contact for any question about your data: [to be completed: dedicated email address]. The processing is declared to the Senegalese Personal Data Protection Commission (CDP) [to be completed: receipt number].

One principle: only what is necessary

The platform is aimed at adult professionals and volunteers. It never collects data about the children they support: publishing it is forbidden (see the child protection policy).

Data collected and purposes

  • Member account: email address (sign-in identifier), display name, job title, country, organisation, optional phone number, password (stored encrypted, unreadable even by EJA), groups joined, dates you accepted the charter and the terms of use. Purpose: managing your account and your access to the network’s spaces.
  • Contributions: uploaded resources, topics, replies, chat messages, likes and reports, with their author and date. Purpose: publishing your contributions and moderating them.
  • Event registrations: name, organisation, email, optional phone number, chosen reminder channel and your consent. Purpose: managing the registration, sending the confirmation and the reminder the day before.
  • Anonymous chat replies: text, optional nickname and an encrypted fingerprint of your IP address that cannot be reversed. Purpose: limiting abuse.
  • Technical data: your IP address is used on the fly to limit the number of requests and protect the site; the application does not store it. Server logs are kept for [to be completed: duration, e.g. 30 days] for security.

Legal basis: your consent (sign-up, events, chat) and the management of the network by EJA. Your data is never sold, transferred or used for advertising.

What is publicly visible

Your display name and organisation appear with your posts. Your email address and phone number are never displayed; the phone number is only visible to EJA. Group discussions are only visible to their members.

Cookies and audience measurement

  • eja-jeton, eja-session and eja-connecte: keep you signed in (30 days at most).
  • eja-allege: remembers light mode if you turn it on (1 year).
  • eja-visiteur: random identifier that avoids counting your chat likes twice when you have no account (1 year).

These cookies are needed for the site to work; no advertising or tracking cookie is set. Traffic is measured with Umami, a tool hosted by EJA, without cookies and without storing your IP address: only aggregate statistics (page views, country, device type) are produced. Social media content only loads when you ask for it.

Recipients and processors

  • The EJA team and focal points, for moderation and facilitation, each for the spaces they are in charge of.
  • Website hosting provider: [to be completed: name and country].
  • Email delivery (confirmations and reminders): [to be completed: SMTP provider, e.g. Hostinger].

If the servers are located outside Senegal, this transfer is governed in accordance with Law No. 2008-12 and declared to the CDP [to be completed depending on the chosen host].

Retention periods

  • Account: as long as it is active; deleted after [to be confirmed: 3 years] without sign-in, after a reminder email.
  • Event registrations: [to be confirmed: 1 year] after the event date.
  • Anonymous replies rejected by moderation: [to be confirmed: 3 months].
  • Published contributions: as long as they remain online; when the account is deleted, they are removed or attributed to “Network member”.

Your rights

You can access your data, correct it, object to its processing or ask for its deletion. Your name, job title, phone number and country can be changed directly from your member area. For other requests, including account deletion or a copy of your data, write to [to be completed: dedicated email address]; you will receive an answer within one month. You can also contact the Personal Data Protection Commission (CDP, www.cdp.sn).

Security

Encrypted connections (HTTPS), encrypted passwords, limited sign-in attempts, administration restricted to the EJA team, regular backups. In the event of a data breach that poses a risk, the people concerned and the CDP are informed.

Updates

This policy may change; the date of the last update is shown at the top of the page.