Last updated: 6 November 2026
This page explains what the FFSMC Vigie Lab software and its "Misleading links" extension do with your information. Purchases made on the ffsmc.fr shop are covered by the shop's own privacy policy.
Who we are
FFSMC, a sole proprietorship run by Christophe Queyroi in Bergues (Nord, France). Contact: [email protected].
In two sentences
Vigie Lab works on your computer, and what it sees there stays there. FFSMC receives nothing about what you do with Vigie Lab or about what is on your computer.
What Vigie Lab looks at on your computer
To protect you, Vigie Lab has to look at what is happening on your computer: Windows and browser settings; installed programs, services, scheduled tasks and extensions; programs' connections to the Internet; use of the microphone, camera and screen capture as recorded by Windows; USB sticks and drives plugged in; the Wi-Fi network in use; drive health, temperature and battery; copied text, when it looks like a malicious command. If you turn these on, it also looks at new messages received in Thunderbird, Foxmail and Mailspring, and at the devices connected to your router. When you ask it to, it goes through your folders to find large files and duplicates.
All of this is examined on your computer. The results (history, alerts, your "Allow" or "Block" choices) are stored in Vigie Lab's folder on your computer and are not sent to anyone. Messages it examines are neither changed nor copied; when one is a trap, the alert keeps only its sender and subject, on your computer.
What goes online, and only when you ask
- Licence check. When you activate your key, or click "Check now" or "Release this computer", Vigie Lab sends the ffsmc.fr shop your licence key, the product bought, the Vigie Lab version number and an identifier for the computer. This identifier is derived from a number specific to your Windows installation, in a way that cannot be traced back to that number. As with any Internet connection, the shop also sees your IP address. This information is used only to check that the licence is valid and to limit it to the number of computers bought. It is kept for the life of the licence, then for as long as the law requires for sales records.
- Password check. When you use the "Has this password leaked?" tool, Vigie Lab computes the password's fingerprint on your computer and sends only its first 5 characters to the Have I Been Pwned service (api.pwnedpasswords.com). Hundreds of different passwords share that piece, so yours cannot be worked out from it. That service sees your IP address and receives nothing else from Vigie Lab.
Vigie Lab sends no usage statistics and no automatic error reports, and it contains no advertising and no analytics tools. There is no account to create.
The diagnostic report
If something goes wrong, the "Create the report" button puts a file on your Desktop. It contains the computer's name and a log of what Vigie Lab has done; it contains no passwords, documents or browsing history. The file only leaves your computer if you send it to support yourself. We use it only to answer you, and delete it once the problem is solved.
Updates
The version sold on ffsmc.fr is updated from a file you download yourself; it never looks for updates on its own. The Microsoft Store version is updated by the Store, under Microsoft's rules.
The "Misleading links" extension
In your browser, the extension looks at the links you click and at the address of the pages you open, to warn you about a trick. With the Studio edition, it also looks at the sender of the open message in Gmail, Outlook.com and Yahoo Mail (in Gmail, it reads the message source again, from your own mailbox) to show who really sent it and where your reply would go. On a company computer, if the company has asked for it, it spots messages in these webmails that use a manager's name but come from an outside address, and messages about a transfer or a change of bank details; it also warns when a file is being sent to a file-transfer site or a personal webmail. All of this stays in your browser: the extension sends nothing to anyone. The only thing it keeps, for 12 hours, is the list of sites for which you chose "I know what I'm doing", stored as a fingerprint from which their address cannot be read.
The Business edition
On a company computer, Vigie Lab writes its status to a shared folder on the company's own server: computer name, score, serious alerts, outdated software, drive and encryption status, the number of copies to USB sticks (never file names), and the overall rate of correct answers to anti-scam exercises (never an individual's result). This information stays within the company, which is responsible for it. FFSMC has no access to it.
Your rights
The only personal data FFSMC receives from Vigie Lab is what the licence check sends. You can ask to see, correct or delete it by writing to [email protected]. If you feel your rights are not being respected, you can complain to the CNIL, the French data protection authority (cnil.fr), or to the authority in your own country.
Changes
If Vigie Lab changes the way it handles your information, this page will be updated before the new version comes out, and the date at the top will change.