What we do to protect the website, your data and the companies listed, and how to report a problem to us.
1. What we protect, and how
- Encrypted connection (HTTPS) on every page.
- Protection against script injection: the website runs only its own files.
- No external service: no advertising, no audience measurement tool, no script coming from another website. Only the number of visits to each profile is counted by the website itself, without a cookie and without knowing who you are.
- Passwords stored encrypted: nobody can read them, not even us.
- Mandatory two-step verification for the administration of the website.
- Company accounts approved by hand, after the e-mail address has been confirmed.
- Forms protected by an anti-robot check that does not use Google, and by a list of refused content.
- Automatic check of registrations: each company's number is checked in the official register (France), in VIES for a European Union VAT number, or according to its format (China, Thailand, Vietnam), then always checked by hand.
- Security log of pages visited (IP address, page, time; no cookie), deleted after 15 days: it detects robots and attacks. An address that persists in a suspicious way may be blocked.
- Companies' e-mail addresses never shown: messages go through us first.
- Log of actions and security log, deleted automatically after 12 months.
- Regular backups, kept in France on an encrypted medium.
- Software kept up to date, with only its official tools: no extension of unknown origin.
2. The companies listed
Each company is checked in the official register of its country before being published, then every year. This check proves that it exists and is active; it does not guarantee the quality of its products or its honesty. Stay careful and always sign a written contract.
3. What we will never ask you for
A password, a code received by SMS, or money by e-mail. We never ask for your bank details by e-mail or by phone. For a refund, you request it yourself in My space. A message asking you for one of these things in our name is a scam: read our guide Protecting yourself from international trade scams.
4. Good habits to protect your accounts
- A login code is never given to anyone. The 6-digit code from your authentication app, or a code received by SMS or by e-mail, is only used to log you in. If someone asks you for it, on the phone, by e-mail or on a messaging app, it is a scam, even if they say they are from the Passerelle, your bank or an official service.
- A code arrives when you are not logging in? Someone is probably trying to get into your account with your password: give this code to nobody and change that password straight away.
- Turn on two-step verification (a code on top of the password) for your e-mail and your important accounts: if your password is stolen, the thief still cannot get in.
- Keep your backup codes on paper, stored safely, not as a photo or in an e-mail: they let you get in if you lose your phone. Each code can only be used once.
- A different password for each website, long and hard to guess; a password manager helps you remember them.
- After a mistake (code or password given by mistake): change your password, log out the other devices if the service allows it, and let us know through the contact form.
5. Reporting a security flaw
Have you found a flaw on this website? Please write to us through the contact form, with the word "Security" in the subject, explaining what you noticed. We ask you not to go further than necessary to show it, not to view or change other people's data, and to give us time to fix it before talking about it publicly. We will answer you and keep you informed.
6. Is a scam using our name?
Let us know through the contact form. If you are a victim, also report it on 17cyber.gouv.fr (French police, gendarmerie and Cybermalveillance.gouv.fr).
Last updated: 25 October 2026 (good habits to protect your accounts).