Terms of Service

French version is the legally binding reference · Last updated: 17 September 2026

1. Identity of the publisher

In accordance with Article 1-1 of the French Act No. 2004-575 of 21 June 2004 on confidence in the digital economy (LCEN), as amended by Act No. 2024-449 of 21 May 2024 (SREN):

2. Purpose and scope

These Terms of Service (the "ToS") govern access to and use of all services and projects made available by Zektyc, namely:

• the website and its clearnet address served through a tunnel (riricdev.tail5ea5cd.ts.net) and its Tor hidden service (.onion), and their content (pages, articles, documentation);
• the Discord bot "Zektyc bot";
• the digital fingerprint test (Fingerprint Test);
• the ZMap mobile application (an Android route-planning application for electric vehicles);
• the ZMap web client (a map interface accessible from the website);
• the Zenyth browser (a hardened Firefox configuration, distributed as an RPM package).

By accessing or using any of these services, you unreservedly accept these ToS. If you do not accept them, you must stop using all services.

3. Website

The website is accessible through several channels: the public clearnet address served through a tunnel (see Section 4) and the Tor hidden service (see Section 5). It is a showcase site that provides general information about privacy protection and cybersecurity. This information does not constitute legal advice, personalised technical advice, or an offer of services.

The website also offers:

• bilingual articles and news (French/English) on privacy and security;
• open-source projects and online tools;
• a contact page and links to communication channels (e-mail, Signal, Discord).

The publisher reserves the right to interrupt access to the website at any time, in particular for maintenance, without prior notice or right to compensation.

4. Clearnet access through the tunnel (transparency on decryption)

The clearnet website is made accessible at https://riricdev.tail5ea5cd.ts.net by means of a tunnel provided by a third-party operator (Tailscale, Inc., United States). This tunnel connects Internet visitors to our infrastructure without requiring any port to be opened on the home network.

4.1 The tunnel sees the transmitted content, encrypted only in transit

It is important that you understand the encryption model used. The TLS encryption between your browser and the clearnet address is terminated on the side of the tunnel operator (Tailscale), and not on our own infrastructure. This means that:

• your connection is encrypted in transit (no passive interception of the readable content by a third party is made possible);
• however, the content of the connection (pages, requests, responses) is decrypted and readable by the tunnel operator, which in effect acts as the TLS termination point;
• the tunnel operator can therefore, technically, access the transmitted content, IP addresses and connection metadata.

We state this without euphemism: over the clearnet, the content is not confidential with regard to the tunnel operator. The only strong layer of confidentiality, detailed in Section 5, is the Tor hidden service.

4.2 We voluntarily disclose nothing

Zektyc does not voluntarily transmit to the tunnel operator any data beyond what the technical operation of the service requires, and does not on its side exploit any content. Zektyc is not in a position to control or limit the access available to the tunnel operator.

4.3 Legal requests, including the US CLOUD Act

As the tunnel operator is a company governed by US law, its access to the content may be required by a public authority in the context of an applicable legal proceeding, including under the US CLOUD Act (22 U.S.C. § 6201 et seq.). Such requests fall outside our control and do not fall under the section on official requests applicable to the publisher (see Section 13). The content decrypted by the operator may thus, in that context, be disclosed to an authority without it being possible for us to prevent this.

We consider this situation a technical limitation of the infrastructure, not a choice. For access that does not expose the content to a third-party operator, use the Tor hidden service (see Section 5) or one of our other end-to-end encrypted channels.

5. Tor hidden service (.onion) and end-to-end confidentiality

The website is also accessible as a Tor hidden service at http://l5cbkqmok4rnkhbtpltmtlf3pa5i5rfw23z2mtj5tugpo3quta3b5hqd.onion. You must use the Tor Browser (or a browser configured for the Tor network) to access it.

5.1 End-to-end encryption

Unlike the clearnet channel, the Tor hidden service is encrypted end to end, from your browser to our infrastructure, with no TLS termination point at a third party:

• No intermediary operator can read the content;
• the Tor network also protects your IP address from us and from any observer;
• our own IP address and geolocation remain concealed.

The hidden service constitutes the most privacy- and security-respecting means of accessing the website. We recommend using it whenever a high level of confidentiality is desired.

5.2 Usage precautions

The hidden service operates over HTTP (not HTTPS), the encryption being provided by the Tor protocol itself. Make sure you access the exact address of the hidden service and verify its integrity through our official channels, in order to avoid any phishing or impersonation attempt.

6. Discord bot (Zektyc bot)

Zektyc provides a free Discord bot named "Zektyc bot", accessible on the Discord server discord.gg/mAXeNf7zUV. The bot allows you to interact by text and voice with a conversational assistant powered by artificial intelligence.

6.1 How it works

• Text: mention the bot or reply to one of its messages to start a conversation;
• Voice: join a voice channel and use the /join command for the bot to join you. Your voice is transcribed into text, the bot responds and speaks its reply aloud. The /leave command disconnects the bot.

6.2 Data processed

The bot processes only the data strictly necessary for the conversation:

• the content of the messages by which you address it;
• your Discord ID and username;
• voice audio, captured only while you are speaking, for the time needed to transcribe it into text;
• the current session history (last twenty exchanges at most), kept in memory only.

Audio and text are transmitted to Groq (Groq, Inc., United States) for transcription and response generation. Text-to-speech (spoken response) is performed locally, in France, without transmission to any third party. No data is written to persistent storage. The history is reset at each bot restart. See the Privacy Policy for details.

6.3 Rules of use

Use of the bot is subject to these ToS as well as to Discord's Terms of Service and Privacy Policy. By using the bot, you agree not to:

• submit to it content that is unlawful, defamatory, hateful, threatening, harassing, or contrary to Discord's rules;
• attempt to circumvent, overload or compromise its operation;
• use it to process personal data or the voice of third parties without their consent.

The bot is provided "as is", without any warranty of availability, continuity or accuracy. Replies generated by AI may be inaccurate or inappropriate and never constitute legal, technical, medical or financial advice. Never send sensitive data to the bot.

The voice session may be interrupted at any time (/leave command, another user's /join command, maintenance, technical disruption). The bot grants access to no account, no administration and no website data.

7. Digital fingerprint test (Fingerprint Test)

The website provides a free digital fingerprint test tool accessible at /en/privacy-test (EN) and /fr/privacy-test (FR).

7.1 How it works

The tool analyses the ability of your browser and device to be uniquely identified. It computes two identifiers:

• ZFP (Zektyc Fingerprint): a fingerprint of the browser layer (ZFP-XXXX-XXXX-XXXX format). It changes when you switch browser or profile. This is the fingerprint used by 95% of tracking services (Cloudflare, FingerprintJS, etc.);
• ZPD (Zektyc Protective Device): a fingerprint of the hardware layer, computed solely from hardware signals resistant to anti-fingerprinting (colour depth, audio codecs, emoji glyph widths, server clock offset). Stable across different browsers on the same machine.

The test analyses over thirty distinct signals: user-agent, Client Hints, timezone, screen resolution, CPU core count, RAM, touchscreen, Canvas 2D rendering, WebGL, WebGPU, WebAudio, installed fonts, emojis, CSS media queries, scrollbar width, storage, mathematical operations, WASM, CPU benchmark, WebRTC, battery, media devices, plugins, text-to-speech voice, video/audio codecs, and more.

7.2 Test modes

• Simple mode: a single run, immediate results;
• 3-run mode: three successive runs with a page reload between each run, allowing comparison of signal stability. Intermediate results are temporarily stored in the browser's sessionStorage (deleted at the end of the test or when the tab is closed).

7.3 Data processed

This tool works in your browser. All processing takes place locally on your device. None of the collected signals, the identifier, or the score are transmitted to our servers, recorded, stored, or used for identification purposes. The only network request made is a call to the /api/time endpoint to measure the clock offset with the server (required for ZPD calculation). This call transmits no personal data.

No usage limit applies. The displayed identifier cannot be used to reconstruct the characteristics from which it was computed (one-way SHA-256 hashing).

7.4 Disclaimer

Results are provided for indicative and educational purposes: they neither constitute an expert assessment, a certificate, nor an enforceable security measurement, and do not necessarily reflect the actual behaviour of all websites or online services. The tool is provided "as is", without any warranty of completeness or accuracy.

8. ZMap — Route-planning application for electric vehicles

ZMap is a free Android application for planning routes for electric vehicles, with display of public charging stations, range calculation and built-in navigation. The application is available for direct download on the website (/zmap).

8.1 How it works

• Cartography: display of OpenStreetMap cartographic data via Leaflet, with satellite view;
• Charging stations: queries to the OpenStreetMap Overpass API (proxied by the Zektyc server) to display charging stations in Europe. Display of operator, brand, power (kW), connectors (Type 2, CCS, CHAdeMO), fees and opening hours;
• Route calculation: via OSRM (Open Source Routing Machine) with distance, duration and step-by-step directions;
• Stations along the route: highlighting of stations compatible with your vehicle along the route;
• GPS navigation: dynamic camera, turn-by-turn instructions, ETA, current speed and speed limit displayed;
• Vehicle selection: Tesla Model Y, Renault Zoe, Peugeot e-208, VW ID.3, Kia EV6, etc. — energy consumption and range calculation;
• Speed data by road: database of 90.5 million speed data points across 3.6 million kilometres of European roads;
• Offline mode: maps, routes and stations cached on the device.

8.2 Data processed

The application collects no personal data. No account is required. No tracker or analytics service is integrated.

The application communicates with the Zektyc server via WebSocket and API calls for station queries, search, routing and speed data. These calls are routed through the server, which proxies requests to Overpass (stations), Nominatim (geocoding) and OSRM (routing), with server-side caching. Request IP addresses are subject to the server's technical logs (retained for 14 days, see the Privacy Policy).

8.3 ZMap web client

A web version of the map is accessible at /zmap/web. It uses Leaflet and the same APIs as the mobile application. The same data-protection principles apply.

9. Zenyth browser

Zenyth is a hardened Firefox configuration, distributed as an RPM package. It aims to maximise privacy protection and make the user's digital fingerprint as uniform as possible.

9.1 Features

• Resist Fingerprinting (RFP): permanently enabled with letterboxing — uniformised canvas, UTC timezone, generic hardware;
• Font masking: font-visibility level 1 — the font test (including via Web Workers) sees an identical set for all users;
• WebGPU and Battery API disabled: these most revealing APIs simply do not exist;
• WebRTC protection: no local IP address leak, mDNS only;
• Locked extensions: JShelter (canvas/audio randomisation per session) and uBlock Origin pre-installed and non-removable;
• Automatic configuration: the launcher creates a dedicated profile and reinjects the hardening at each startup.

9.2 Compatibility

Zenyth forces the US English locale, UTC timezone and a standardised window size. This may cause more frequent re-authentication prompts on some websites. The RPM package is currently compatible with Fedora/RHEL-based systems.

9.3 Data processed

Zenyth is software installed locally on your device. It transmits no data to Zektyc or to third parties. Its configuration is entirely local.

10. Intellectual property

The website, its structure, its texts, its visual identity (name, logo, graphic charter) and all the elements composing it are the exclusive property of the publisher or their authors, and are protected by intellectual property law.

Any reproduction, representation, modification, publication, adaptation or exploitation, in whole or in part, of these elements, by any means whatsoever, without the publisher's prior written consent, is prohibited and constitutes infringement (Article L. 335-2 of the French Intellectual Property Code). Quotation with clear attribution of source is permitted within the limits of Article L. 122-5 of the same code.

The detailed conditions governing the use of content (texts, blog posts, logo, visual identity, source code) are set out in the Content License, which forms an integral part of these Terms of Service. Any unauthorized reproduction may be removed at the author's sole request, including when hosted in a git repository (Forgejo or otherwise).

11. User conduct

When using the services, you agree not to:

• attempt to compromise the security or integrity of the services (unauthorised access, intrusion, penetration testing, exploitation of vulnerabilities);
• disrupt or attempt to disrupt the functioning of the services, including through automated requests, bulk downloads or attempts to overwhelm them;
• extract or collect the website's content in an automated manner;
• use the services for unlawful or fraudulent purposes;
• attempt to circumvent rate-limiting mechanisms or security protections.

Any such attempt may result in technical blocking (rate limiting, IP address blocking) and legal proceedings.

12. Responsible disclosure of vulnerabilities

The publisher, whose activity relates to security and privacy, considers the reporting of vulnerabilities a useful and legitimate act. A person who identifies a vulnerability affecting the services may report it to riric65@protonmail.com; such a report, made in compliance with the conditions below, does not constitute a breach of Section 11. Conditions:

• not exploit the vulnerability to obtain unauthorised access or to alter the service beyond what is strictly necessary to demonstrate it;
• not access or expose other users' data;
• report the vulnerability within a reasonable time after its discovery;
• provide sufficient information to allow the problem to be reproduced and fixed.

Grace period. Unless otherwise agreed, the reporter refrains from any public disclosure for a period of ninety (90) calendar days from confirmation of receipt of the report. Upon expiry of this period, if the vulnerability has not been fixed, the reporter may disclose it publicly within the limits strictly necessary to describe the problem, without exposing or exploiting users' data. The publisher may notify a reasonable additional period, duly justified (complex fix, third-party dependency), which then suspends disclosure for its duration.

For any sensitive or confidential communication, prefer e-mail or Signal over Discord.

The publisher undertakes to acknowledge receipt of the report within a reasonable time and to inform the reporter of the follow-up. The official policy is available at /.well-known/security.txt (RFC 9116).

13. Official requests, evidence and verification of authority

As a matter of principle, no information is disclosed on the sole basis of a request, whatever its origin. Any request must be grounded in a justified legal framework and supported by concrete, documented evidence (a judicial decision, an administrative act, a precise and applicable legal reference).

Any person claiming to act on behalf of a public authority must, before any disclosure, imperatively prove their identity and the exact scope of their powers: identifiable and verifiable official documents, reference numbers, an act or decision justifying the request within a legal framework. The publisher reserves the right to verify such authority by any reasonable means and to refuse any disclosure until this proof is provided.

These requirements also apply to requests presented as urgent or confidential, with no exception related to the requester's declared status.

14. Liability

The services are provided "as is". The publisher strives to ensure the accuracy of the published information and the availability of the services, without however guaranteeing the absence of errors, interruptions or viruses. The publisher shall not be liable for any direct or indirect damage resulting from the use of the services or the inability to access them.

Regarding the Discord bot, replies generated by artificial intelligence may be inaccurate, incomplete, outdated or inappropriate. They never constitute legal, technical, medical, financial or other advice.

Regarding ZMap, the cartographic information, routes and charging stations are provided for indicative purposes. Charging station availability, travel times and distances may vary. The application does not replace a professional navigation system or a real-time check of charging station status.

These limitations do not apply where the applicable law (in particular consumer protection law) prohibits them, and shall in no case deprive consumers of the rights conferred on them by mandatory provisions.

15. Hyperlinks

The website may contain links to third-party websites (Discord, OpenStreetMap, OSRM, Groq, etc.). These links are provided for your convenience. The publisher exercises no control over these websites, does not guarantee their content or privacy policy, and declines all responsibility in respect of them. Linking to the website is permitted provided it does not involve misleading or misrepresentative presentation.

16. Changes to the ToS

The publisher may amend these ToS at any time. The applicable version is the one online at the time you access the website. The date of the last update appears at the top of this document. If you continue to use the services after a new version is published, you are deemed to have accepted it.

17. Governing law and jurisdiction

These ToS are governed by French law.

By default, the publisher does not physically appear before a court: exchanges relating to any dispute take place in writing and remotely (e-mail, written procedure, online mediation), systematically favouring amicable resolution.

In accordance with Article 46 of the French Code of Civil Procedure, any dispute relating to the use of the website shall, in the absence of amicable resolution, be brought before the competent French courts. For consumers, the competent court is that of their place of domicile (Regulation (EU) No. 1215/2012, Chapter II, Section 4, Article 18(1)).

18. Online dispute resolution

The European online dispute resolution platform was discontinued on 20 July 2025 (Regulation (EU) No. 2024/3228). Consumers residing in the European Union can obtain information on alternative dispute resolution mechanisms from the EU consumer redress information tool: consumer-redress.ec.europa.eu.

19. General provisions

Severability

If any clause of these ToS were held null, void or unenforceable by a competent court, the other clauses would remain fully applicable. The clause concerned would then be interpreted, to the fullest extent permitted by law, in the manner closest to the parties' intention.

No waiver

The fact that the publisher does not exercise or delays exercising a right provided for in these ToS shall in no case constitute a waiver of that right.

Reference language

These ToS are drafted in the French language, which is the only binding version. Any translation is provided as a courtesy only and has no legal value.

20. Contact

For any question relating to these ToS or to the use of the services, please contact us at: riric65@protonmail.com.

Version française de référence : Conditions Générales d'Utilisation (FR).