Privacy policy

What this service records, why, and who it goes to. Written to be read.

Last updated: 2026-09-06

What we record about you

Your account: email address, a name if you give one, role, a password hash (bcrypt — the password itself is never stored), and the dates you were created and last signed in.

What you create in the tool: the avis you follow and the private notes you attach to them, your saved searches and the history of alerts sent, and any quotes or invoices you produce, including the client details you type into them.

Server logs: for each request, the IP address, the timestamp, the method, the path, the response code and the browser identifier. They exist for diagnosis and abuse detection.

Cookies

Two cookies, neither for advertising nor for analytics.

“mp_token” carries your session. It is httpOnly — the page’s JavaScript cannot read it — sent only over HTTPS, scoped to this site, and expires after twelve hours.

“lang” remembers the language you chose. It holds nothing but “fr”, “en” or “ar”.

The portal data

The notices, results, buyers and winning companies come from the public portal marchespublics.gov.ma. That is information the Moroccan administration has already published; this service keeps and organises it, and does not obtain it from you.

Who it goes to

Nobody, except in the two cases below, and never for commercial purposes.

Translation: when you ask for an avis’s articles to be translated, the text of those articles is sent to the Google Cloud Translation API to be translated. That text comes from the public portal; no account data accompanies the request. With no key configured the feature is disabled and nothing is sent.

Email: if a mail server is configured, your alerts and password-reset links pass through it. With none configured, those messages are only recorded on the server and go nowhere.

What we do not use

No analytics, no trackers, no ad network, no social buttons. The pages load no font, script or image from any other domain — the icons are inside the page itself. Nothing you do here is observed by a third party.

How long

Account data and what you create is kept for as long as the account exists. Backups of the database are kept about a week on rotation. Server logs follow the system’s usual rotation.

Your requests

You can ask for a copy of what concerns you, correction of anything inaccurate, or deletion of your account and what you created in it. Write to the contact address below. Data drawn from the public portal is not personal data about you and is not deleted on that basis.