Legal information
Publisher
- Company name
- Verity Score
- Legal form
- Simplified joint-stock company (SAS) with share capital of 500 euros
- Registered office
- 138 avenue Victor Hugo, 75016 Paris, France (registered address provided by Les Tricolores)
- Registration
- RCS Paris 108 480 583, EU VAT FR68108480583, EUID FR7501.108480583
- Publication director
- Kamil Kaderbay, president of Verity Score
- Contact
- contact@compoatlas.com
Hosting provider
- Name
- Cloudflare, Inc.
- Address
- 101 Townsend St., San Francisco, California 94107, United States
- Telephone
- +1 (650) 319-8930
Personal data
The site sets no cookies and does not measure its audience. Viewing pages requires no information to be entered. Voluntary submission of a photograph, link or API key request follows the terms described below. Product photos are served by the site itself: displaying a page does not send your address to any third party.
Hosting and logs
- Processor
- Cloudflare, Inc., which routes and caches pages. To do so, it processes each visitor's IP address. Its obligations appear in its data processing agreement (version 6.4 of 3 April 2026), which forms part of the hosting contract.
- Logs
- The request logs Cloudflare offers to retain for the site (Workers Logs) are disabled. The server only keeps failed requests (date, requested address, response code, without the reader's IP address) and error messages, retained for 7 days to fix failures.
- Transfer outside the Union
- Cloudflare may process these data in the United States under the EU-US Data Privacy Framework, which it states it complies with.
API access requests
- Data
- Name, email address, organisation (optional) and intended use, entered in the request form. No IP address or tracking (see ‘Daily limits’ below).
- Purpose
- Process the request, then manage the granted key (quota, revocation).
- Legal basis
- Pre-contractual measures taken at your request (Article 6(1)(b) of the GDPR).
- Retention
- 12 months after the request, or after the last use of the granted key, then deletion.
- Storage
- Cloudflare D1 database (Cloudflare, Inc., processor described above).
Daily limits (link reading, access requests)
- Data
- An IP address fingerprint (HMAC-SHA-256 code calculated using a secret key and the current date, from the /64 prefix for an IPv6 address): it cannot be used to recover the address and changes daily.
- Purpose
- Limit abuse: 10 product pages read and 3 access requests per day per visitor.
- Legal basis
- Legitimate interest (Article 6(1)(f) of the GDPR): protect the service and its cost.
- Retention
- Two days, then deletion.
- Storage
- Cloudflare D1 database.
Names of food business operators placing food supplements on the market
- Origin
- Food supplement declarations published by the Directorate-General for Food (the Compl'Alim dataset on data.gouv.fr, Open Licence 2.0).
- Data
- The operator name as declared. The address and SIRET number published by the source are not reproduced. For a sole trader, this name is personal data.
- Purpose
- Inform the public who is responsible for the product placed on the market.
- Legal basis
- Legitimate interest (Article 6(1)(f) of the GDPR): consumer information on food supplements, using data made public by the administration.
- Duration
- As long as the declaration appears in the published dataset. Data removed from the source disappear from the site at the next data update.
- Your rights
- Objection, rectification, erasure: write to contact@compoatlas.com. An objection is applied at the next update: the name no longer appears on any page or in any file. You can also contact the CNIL (cnil.fr).
Data rights
CompoAtlas texts, analyses, name matches, opinion summaries and pages form a database belonging to Verity Score, protected by the database producer's right (French Intellectual Property Code, articles L341-1 and following; EU Directive 96/9/EC). Short quotation with a link to the page is free. Crawling by search engine and AI assistant robots, to index pages, answer their users and train their models, is allowed within the limits of the robots.txt file. Any other extraction or reuse of a substantial part, including by a program, requires written agreement (contact@compoatlas.com). Original public data keep their licence (Sources page); the table of cosmetics recorded from Open Beauty Facts, with the matching of their ingredients, and the separate Open Food Facts supplement table with recognised components are distributed under the ODbL (Open data page). Canadian recalls retain OGL-Canada 2.0: Contains information licensed under the Open Government Licence – Canada.