Legal
Terms of Use
ChocoLOCK, cybersecurity awareness
1. Purpose of the service
ChocoLOCK is a cybersecurity awareness site. It is a playful reminder to lock your session: it shows simulated lock screens (blue screen, red screen, etc.) on the device of whoever opens the page.
The site offers: creating ChocoLOCKs (classic, flash, super), targeted ChocoLOCKs (by QR code or session code, aimed at a person or a team), pastry rounds with a vote, a bakery map, a dashboard and a custom page editor for registered users, a blog, statistics, a game (Cookie Clicker) and access by QR scan or code entry to trigger a targeted screen.
2. Acceptance of the terms
Accessing and using the site means accepting these terms. Use without an account is still subject to them. Creating an account and using the features reserved for signed-in users (dashboard, history, custom pages, targeted scan) confirm that acceptance.
3. Use of the service
ChocoLOCK is provided for informational and educational purposes, as part of session-locking awareness. You agree to:
- Use the service in compliance with applicable laws and the rules of your organisation (company, institution, etc.).
- Not use targeted ChocoLOCKs or session codes to harass, impersonate, or access devices without the owner's agreement.
- Not attempt to bypass the site's protections or to access other people's data.
Using the simulated lock screens (full screen or not) is your sole responsibility. Make sure the people targeted are in an authorised context (internal awareness, training, etc.).
You are naming a third party. When you type the name of the person caught in a ChocoLOCK, the name of the person buying on a round, or your name in a targeted session, you are responsible for that entry. A round page is readable by anyone with the link. Do not name anyone who would not expect it. Any person named can ask for their name to be removed at the address given in section 7; removal is done without condition.
4. User account
Some features (dashboard, ChocoLOCK history, custom page editor, targeted scan) require registration and sign-in, by a link sent by e-mail or through a Google account. You are responsible for keeping your access private and for any activity from your account.
You can manage your account and your data from the Account page, and delete your account there.
5. Data and privacy
The processing of personal data and browser storage are described in our Privacy Policy.
Summary: without an account, the site records the ChocoLOCK you trigger, the name you type if any, a device identifier, and your truncated IP address if you allowed it. With an account, it also processes your e-mail, username, avatar, history and custom pages. The site uses no audience measurement tool.
6. Limitation of liability
ChocoLOCK is an awareness tool. The service is provided “as is”. We are not liable for the consequences of using the simulated screens (in a professional environment or on third parties) nor for the names you type. You are solely responsible for how you use it and must make sure you have your organisation's agreement where needed. ChocoLOCK never commits to paying for pastries or any other expense.
7. Contact
For any question about these terms, about your data, or to ask for a name to be removed, write to contact@chocolock.fr.
Last update: