Privacy Policy for the Spectre iPhone app

Last updated: November 13, 2026

The Spectre iPhone app is published by Redorzo, 3 rue Claude Monod, Broca, 78270 Cravent, France. Contact: contact@redorzo.com.

In short

The app talks to a single server: the Spectre server whose address you enter, your site's server. It uses no other service, whether from Redorzo or from any third party. No ads, no analytics, no tracking.

What Redorzo collects through the app

As the app's publisher, nothing. The app sends no data to Redorzo, nor to any partner, ad network or analytics tool: it contains none. You do not need a Redorzo account to use it.

If Redorzo also hosts your organization's Spectre server, your data is processed there on your organization's behalf, under the hosting contract between them (see “Your Spectre server”).

Your Spectre server

Spectre is website management software that runs on each organization's server: its own, or one run by a hosting provider. What you do in the app (signing in, content, comments, media, form submissions, reservations, settings) is sent to that server, over HTTPS, and to that server only.

With each request, the server also receives your connection's IP address, the device type (iPhone), the app version and the iOS version. It keeps them with your session: they are shown in your list of sessions (“My account”), and the IP address may also appear in the site's audit log.

That data is the responsibility of the organization that runs the server. If it uses a hosting provider, Redorzo or another, the provider handles the data on its behalf, under the contract between them. For any question about that data, or to exercise your rights (access, correction, deletion…), contact your site's administrator.

What stays on your iPhone

• Your session (server address, email address, sign-in token), in the iOS keychain, for this device only: it is never synced and does not move to another iPhone. Your password is never stored.
• A few preferences: the address of the last server you used, your Face ID lock choice, and the site chosen for each server and account (stored under a hash, without your email address in plain text).
• Temporary files: images you view may be kept for a while in the app's cache; a CSV export of form submissions is deleted when you leave the screen.

“Sign out” deletes the session from the iPhone and asks the server to close it. You can also close your sessions remotely from “My account”.

Face ID

The Face ID lock (or Touch ID, or your iPhone passcode) is optional. iOS performs the check: the app only receives the result (success or not), never your biometric data.

Camera

The camera is used only to read the sign-in QR code shown by your site's administration, when you ask for it. No image is kept or sent. Only the content of the QR code (the server address and a single-use code) is used, to sign you in to that server.

Photos

The iOS photo picker runs outside the app: the app only sees the photos you choose, and sends them only to your server, into your site's media library. A HEIC photo is converted to JPEG without its metadata (location, camera). A photo that is already JPEG, PNG, WebP or GIF is sent as it is, with the information it contains.

Links and sharing

When you tap a link, an email address or a phone number, iOS opens the matching app (Safari, Mail, Phone, Messages). A CSV export or a link is shared only when you ask, through the iOS share sheet, to the destination you choose.

Changes

Any change to this policy will be posted on this page, with its date.

Contact

For any question about this policy: contact@redorzo.com.