How does Ethara calculate the scores?

From public ESG reports, vetted business press, sector NGOs, and moderated community reports. Every score is sourced, traceable, and reviewed twice a year by an independent editorial team.

Yes, entirely free. No ads, no affiliate commission. Funded by donations and an optional Pro subscription for advanced research.

Can a brand pay to change its score?

No. Ethara is strictly independent. No brand can pay to alter its score or remove an analysis. Without that independence, the score is worthless.

What if I think an analysis is incorrect?

Every detail screen has a “Report” button. The editorial team reviews each remark and can update a sourced score.

On which devices is Ethara available?

iOS 16+ and Android 11+. A Chrome and Firefox browser extension is in the works for late 2026, to analyse a site straight from the desktop.

Privacy Policy

Last updated: 6 May 2026

Tugdual Launay, sole trader (French Entreprise Individuelle), publishes the Ethara service and takes the protection of your personal data seriously. This Policy describes how data is processed across all surfaces of the service: website (ethara.fr), mobile application (iOS and Android) and browser extension (Chromium-based).

1. Data controller

Tugdual Launay, sole trader. Contact: contact@ethara.fr.

2. Data collected

We strictly limit collection to data required to run the service.

Account (optional on the website, required for some mobile/extension features):

email address, Google identifier (mobile and extension), Apple identifier (mobile only).
password (hashed, never stored in clear).

Searches and analyses:

URLs of analysed retailers and timestamps. The extension transmits the active URL to our servers to retrieve the matching analysis.
Stored locally on the device, or encrypted on our servers if the user is signed in.

Technical data:

device type, OS version, app/extension version, preferred language, truncated IP address.

Reports:

content of editorial reports (pseudonym + text).

No precise location data is collected. No data is sold. General browsing history is never read: only the URL of the retailer for which an analysis is requested is sent to our servers.

3. Purposes

Provide the service (site analysis, rankings, alternatives);
Improve score quality via reports;
Ensure security (abuse prevention);
Comply with legal obligations.

4. Legal bases

As applicable: performance of contract (Terms), legitimate interest (security, aggregated improvement), consent (anonymised analytics where relevant), legal obligation.

5. Sub-processors

We rely exclusively on:

Firebase (Google Ireland Ltd.) — authentication, database, storage, server functions, application hosting for the mobile app and extension.
Vercel Inc. (United States, covered by Standard Contractual Clauses) — website hosting.

Neither sub-processor is allowed to use your data for their own purposes.

6. Extension permissions

The browser extension requires the following technical permissions:

Active tab URL access — to identify the retailer being visited.
Host permissions — to display the contextual analysis on relevant pages.
Storage — to keep preferences and session locally.

These permissions are used only for the stated purposes. The content of visited pages is not read, stored or transmitted.

7. Retention

Account: while the account exists + 30 days after deletion.
Analysis history: 24 months after last activity.
Reports: 5 years for editorial traceability.
Technical logs: 12 months.

8. Your rights

Under the GDPR you have rights of access, rectification, erasure, objection, restriction and portability, as well as the right to issue directives regarding your data after your death. To exercise them: contact@ethara.fr. You may also lodge a complaint with the CNIL (cnil.fr).

9. Cookies and local storage

The website does not use advertising cookies or third-party tracking pixels. A single technical cookie (ethara-locale) stores your preferred language. No consent is required for this strictly necessary cookie.

The mobile application and extension use technical local storage (preferences, session) that does not require consent under article 82 of the French Data Protection Act.

10. Security

Data is encrypted in transit (TLS 1.3) and at rest. Internal access follows the principle of least privilege. Any breach affecting personal data would be reported to the CNIL and to the people concerned within 72 hours.

11. Minors

The service is not intended for users under 15 (digital consent threshold set by article 45 of the French Data Protection Act). If we learn an account was created by a child under 15 without parental consent, it will be deleted.

12. Transfers outside the EU

Data may be processed in the United States by Vercel Inc. under the Standard Contractual Clauses adopted by the European Commission. Firebase operates from the European Union (Google Ireland Ltd.).

13. Changes

This policy may evolve. Substantial changes will be communicated through the service.