Skip to content
FireThunder
EN
FireThunder
EN·FRRequest a demo →
PRIVACY

Privacy policy

Last updated: 30 April 2026

FireThunder is committed to protecting visitor privacy. Personal data is processed in accordance with Moroccan Law 09-08 on the protection of natural persons with regard to the processing of personal data, and with GDPR principles (EU Regulation 2016/679) where applicable (EU visitors, EU hosting).

For legal purposes, the original French version of this policy prevails over this English translation.

1. Data controller

FireThunder SARL, Casablanca, Morocco. Contact for any question regarding your data: privacy@firethunder.ma or contact@firethunder.ma.

2. Data we collect

  • Contact and demo forms: first name, last name, professional email, phone (optional), organization name (optional), free-form message, products of interest (demo form). All fields are explicitly requested.
  • IP address: kept temporarily for anti-spam (rate limiting, 10-minute rolling window) and security audit.
  • Analytics cookies (Google Analytics 4): only if you accepted the consent banner. Data is anonymized (truncated IP). GA4 technical IDs (`_ga`, `_ga_*`).
  • Technical cookies: cookie consent preference (`ft-consent` localStorage), needed for the banner.

No third-party advertising trackers, no Facebook pixel, no external chat widget is installed on the site.

3. Purposes

  • Reply to your contact or demo requests.
  • Issue a quote or schedule a sales meeting at your request.
  • Measure anonymized audience to improve content (only with consent).
  • Fight abusive submissions (spam, brute-force).

4. Legal basis

  • Consent (Law 09-08 art. 4 / GDPR art. 6.1.a) for GA4 cookies.
  • Legitimate interest (GDPR art. 6.1.f) for security (rate limit, audit) and commercial traceability of requests.
  • Pre-contractual measures (GDPR art. 6.1.b) for processing quote and demo requests.

5. Retention

  • Contact / demo requests: 3 years from last contact, in the secured leads database.
  • Rate-limit logs: 10 minutes (in-memory only).
  • GA4 cookies: 13 months maximum (default config, aligned with CNIL/CNDP recommendations).
  • Confirmation email sent to the requester: retained by your email provider, outside FireThunder's control.

6. Recipients

Data is never sold. It is accessible to:

  • FireThunder team (sales, technical) to respond to your request.
  • Hetzner Online GmbH (Germany, EU) — site and leads database hosting. No transfer outside the EU.
  • Google Ireland Ltd. (Ireland, EU) for GA4 — only with your consent, anonymized data.
  • Cloudflare Inc. (United States) for the Turnstile anti-spam service — only at form submission; no persistent cookie is set.
  • Brevo (Sendinblue SAS, France, EU) for transactional email delivery (contact forms and confirmations).

7. Your rights

Under Law 09-08 and GDPR, you have the following rights:

  • Access: obtain a copy of data concerning you.
  • Rectification: correct inaccurate information.
  • Erasure: request deletion (subject to legal retention obligations).
  • Objection: refuse processing for commercial purposes.
  • Portability: receive your data in a structured format.
  • Withdraw consent: at any time for analytics cookies (clear localStorage via your browser settings, or use the cookie icon in the footer once available).

To exercise these rights, write to contact@firethunder.ma with proof of identity (Law 09-08 art. 17). Reply within one month.

If you believe your rights are not respected, you may file a complaint with the CNDP (Moroccan National Commission for the Protection of Personal Data) – cndp.ma.

8. Cookies — detail

Strictly necessary cookies

  • ft-consent (localStorage) — stores your choice to accept or refuse analytics cookies. Duration: unlimited (until manual deletion).

Audience measurement cookies (with consent)

  • _ga, _ga_* — Google Analytics 4. Duration 13 months. Domain firethunder.ma.

You may refuse or withdraw your consent at any time. Until you have explicitly accepted, GA4 is not loaded on the page (script absent, no network call to Google).

9. Security

The site is served exclusively over HTTPS (Let's Encrypt). The leads database is stored on Hetzner with access restricted by HTTP Basic authentication. Emails are encrypted in transit (TLS) with your SMTP provider.

10. Policy changes

FireThunder may update this policy. Substantial changes are flagged on this page with a new last-updated date; directly affected visitors (clients, active leads) are notified by email.