This section sets forth statutory disclosures required under Article 6 of French Law n° 2004-575 for Confidence in the Digital Economy (LCEN) and articles 13 and 14 of the General Data Protection Regulation (GDPR).
5.1
Legal publisher notice (mentions légales, LCEN art. 6)
The Affinix website, software platform, and computational services are edited and published by: Charles Duprat, registered under French business registry SIREN 881 003 255, residing in Marseille, France. Editorial direction and technical management are performed directly by the publisher (contact@affinix.bio).
5.2
Hosting provider (hébergeur, LCEN art. 6-I-2)
Affinix is hosted on the serverless edge execution infrastructure of Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA), through its French subsidiary Cloudflare France SAS (6 Place de la Madeleine, 75008 Paris, France; SIREN 883 044 646). For all European Union and European Economic Area (EEA) users and sessions, edge worker computation and data transit are exclusively routed through European Union data centers.
5.3
Ephemeral simulation pipeline and encrypted account database
When you execute a simulation, your selected regimen, patient parameters, and organ function indicators are transmitted via encrypted HTTPS directly to the serverless Worker for mathematical integration. These parameters are held in transient memory solely for numerical solving. To optimize execution and prevent repeated computations, mathematical trajectories may be ephemerally cached in volatile Cloudflare Worker isolate RAM and edge cache for up to 24 hours, keyed strictly by an irreversible SHA-256 hash of anonymous numerical parameters, with zero persistent disk logging, zero database storage, and zero patient identification. For authenticated users, basic account identity, professional credentials, role assignments, and capability entitlements are maintained in a secure, encrypted European Union Cloudflare D1 database governed by European GDPR standards.
5.4
Client-side local storage disclosure
Affinix uses the client browser local storage mechanism under the designated key "affinix-sim-storage-v3" solely to allow the user to retain their configured scenario across browser refreshes on their own physical device. This data is strictly local, never synchronized to any Affinix server, and may be purged by the user at any time through their browser settings or the platform reset option.
5.5
Essential authentication cookies and zero third-party tracking
Affinix deploys zero tracking cookies, advertising trackers, third-party analytics scripts, or commercial profiling identifiers. For authenticated sessions, strictly necessary first-party cryptographic session cookies (configured as HttpOnly, SameSite=Lax, and Secure) are issued solely to maintain session integrity, prevent cross-site request forgery, and verify access entitlements. Technical performance, network latency, and Core Web Vitals are monitored using Cloudflare privacy-first, cookieless edge Real User Monitoring (RUM) beacon with zero advertising tracking, behavioral profiling, or cross-site identifiers.
5.6
Automated verification and abuse defense (Cloudflare Turnstile)
To protect authentication endpoints and email dispatchers from automated credential stuffing, distributed denial of service, and brute-force attacks, Affinix utilizes Cloudflare Turnstile bot detection. This evaluation operates on privacy-preserving cryptographic challenge tokens without persistent tracking, device fingerprinting, or user browsing history profiling.
5.7
Transactional verification communications (Cloudflare Email Service)
When requesting passwordless sign-in or account verification, a temporary six-digit authentication code is dispatched to the user's institutional or designated email address via Cloudflare Email Service. Email addresses are processed solely for the transmission of transactional security passcodes, expire automatically after five minutes, and are never enrolled in commercial mailing lists or disclosed to third parties.