Last updated: June 28, 2026
wallabag.it is a read-it-later service that lets you save web pages, URLs, articles, tags, annotations and reading preferences.
This notice explains how personal data is processed for the wallabag.it website and hosted wallabag.it service.
Data controller
The data controller is Nicolas Lœuillet, sole proprietor and publisher of wallabag.it.
Contact: nicolas@wallabag.it
Address:
wallabag.it
chez Nicolas Lœuillet
30 bis rue des sapins
62720 Rinxent
France
Data we process
Depending on how you use the service, wallabag.it may process the following categories of data:
- account data: email address, hashed password, account preferences;
- content data: saved URLs, titles, extracted article contents, tags, annotations, favourites, read/unread status, creation and update dates;
- import and export data: files or data submitted when you import or export your articles;
- subscription data: selected plan, payment status, invoices, transaction references;
- support exchanges: messages sent to support, email address, information needed to handle the request;
- technical data: IP address, user-agent, technical logs, security events;
- website analytics data, when Matomo is used.
wallabag.it does not collect full payment card details. Payments are processed directly by payment providers.
Purposes, legal bases and retention periods
| Purpose | Data concerned | Legal basis | Retention period |
|---|---|---|---|
| Account creation and management | Email, hashed password, preferences | Performance of the contract | 18 months |
| Provision of the wallabag.it service | URLs, extracted contents, tags, annotations, favourites, reading statuses | Performance of the contract | For the lifetime of the account or until deletion by the user |
| Imports and exports | Imported data or data generated for export | Performance of the contract | For the time needed to perform the operation, then deletion or storage in the account depending on the requested action |
| Payment and subscription management | Plan, payment status, transaction references | Performance of the contract | For the subscription period, then limited archiving for proof purposes |
| Invoicing and accounting | Invoices, payment information needed for accounting | Legal obligation | 10 years from the end of the relevant accounting year |
| User support | Messages, email, useful technical information | Performance of the contract and legitimate interest | For the time needed to handle the request, then archiving for up to 3 years |
| Security, abuse prevention and maintenance | Logs, IP address, user-agent, technical events | Legitimate interest | Up to 12 months, unless longer retention is needed to handle an incident |
| Website analytics | Anonymized or pseudonymized browsing data | Legitimate interest or consent depending on configuration | Matomo cookie up to 13 months; anonymized data up to 6 months |
| Service emails | Email, account or subscription information | Performance of the contract | For the lifetime of the account |
| Newsletter and commercial information | Email, subscription preferences | Consent or legitimate interest for existing customers | Until unsubscribe |
Access to saved URLs and article contents
Saved URLs, article titles, article contents, tags and annotations in wallabag.it are private.
wallabag.it does not read, sell or use this content for advertising, commercial or editorial purposes.
Limited technical access may nevertheless occur when necessary:
- to maintain the service;
- to fix a technical incident;
- to respond to a support request;
- to ensure service security;
- to comply with a legal obligation.
Such access is restricted to authorized persons, limited to what is strictly necessary for the relevant intervention, and subject to a confidentiality obligation.
Account deletion and backups
You can request deletion of your account by writing to nicolas@wallabag.it.
After account deletion, active data associated with the account is deleted within a maximum of 30 days, unless a legal retention obligation applies or temporary retention is necessary for service security.
Data may remain temporarily present in technical backups for up to 90 days before automatic overwrite.
Backups are used only to restore the service in the event of a technical or security incident.
Data export
You can export your articles and data from wallabag.it in the formats provided by the service, including PDF, ePUB, mobi, JSON, CSV, txt or HTML.
Subprocessors and providers
wallabag.it uses technical providers that are strictly necessary for operating the service.
| Provider | Role | Location |
|---|---|---|
| Hetzner Online GmbH | Server hosting | Germany / European Union |
| Stripe | Card payments | European Union; possible transfers outside the EU under their terms |
| Payplug | Card payments | France / European Union |
| PayPal | Payments | European Union; possible transfers outside the EU under their terms |
| Matomo | Website analytics | wallabag.it infrastructure / European Union |
| Zammad / helpdesk.wallabag.it | User support and support chat | wallabag.it infrastructure / European Union |
| PHPList | Email and newsletter sending | wallabag.it infrastructure / European Union |
These providers process data only for the purposes required by their role. Where transfers outside the European Union are necessary, they must be covered by appropriate safeguards in accordance with the GDPR.
Recipients
Data is intended for wallabag.it and for the providers required for hosting, payment, support, security, accounting and service communications.
Data is not sold to third parties.
Your rights
Under the conditions provided by the GDPR, you have the following rights:
- right of access;
- right to rectification;
- right to erasure;
- right to restriction of processing;
- right to object, where processing is based on legitimate interest;
- right to data portability, where processing is based on contract or consent;
- right to withdraw consent at any time, where processing is based on consent.
To exercise your rights, contact nicolas@wallabag.it.
You may also lodge a complaint with the CNIL: https://www.cnil.fr.
Mandatory data
Data required for account creation, service provision, payment and invoicing is mandatory in order to use wallabag.it.
Data related to the newsletter or to optional communications is optional.
Automated decision-making
wallabag.it does not make decisions producing legal effects concerning you solely on the basis of automated processing.
Changes to this notice
This notice may be updated to reflect changes to the service, tools used or applicable regulations.