Privacy

Privacy policy

Data controller

Samuel Marchese, sole trader registered in France, SIREN 844 569 343. Contact: [email protected].

Data collected

The contact form collects what you type into it: name, email address, company, message. Your IP address is read when you submit, solely to cap how many messages can be sent per hour and to block automated submissions; it is kept only as a hash, and only for one hour.
If, and only if, you accept audience measurement, Google Analytics collects browsing data: pages viewed, time spent, referrer, device type, and a truncated IP address. None of it identifies you to me, and I cross-reference it with nothing.

Purpose and legal basis

Three processing activities, three separate bases.
Answering your enquiry and protecting the form against automated submissions: legitimate interest (GDPR article 6.1.f).
Measuring site traffic to find out which pages are of any use: your consent (article 6.1.a), collected through the banner and revocable at any time.
Keeping your light or dark display preference: necessary for the service you asked for yourself by using the toggle.

Retention

Messages: twelve months after the last exchange, then deletion. The form's IP hash: one hour. Audience measurement data: fourteen months, the longest period Google Analytics allows. Your banner choice: six months.

Recipients and transfers outside the European Union

Messages from the form are read by Samuel Marchese only. They reach me through Discord (Discord Inc., United States), used as an inbox; they are not used there for anything else. If you accept audience measurement, the corresponding browsing data is processed by Google Ireland Limited, which may transfer it to the United States.
Both transfers outside the European Union rely on the European Commission's standard contractual clauses; Google also adheres to the EU–US Data Privacy Framework. To avoid both: decline audience measurement, and email me directly at [email protected] rather than using the form.

Cookies and analytics

No audience measurement starts without your agreement. On your first visit a banner asks you to choose; declining is exactly as easy as accepting, and until you answer, nothing is stored and no request goes to any third party.
If you accept, the site loads Google Analytics (Google Ireland Limited), which sets its own measurement cookies in your browser to tell visits and pages apart. If you decline, the script is never loaded.
Your choice is kept for six months in your browser's local storage, then the question is asked again. You can change it at any time through the "Audience measurement" link in the footer, or by clearing the site data.
Whatever you choose, the light or dark theme you pick is kept in local storage. It never leaves your device, serves only that display, and therefore needs no prior consent.

Your rights

Access, rectification, erasure, restriction, objection, portability: write to [email protected]. I reply within one month. You may also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).