Privacy policy
What this site does with your data, and what you can require of it, under Regulation (EU) 2016/679.
Last updated: 28 August 2026
Data controller
The data controller is the site publisher, whose identity and contact details appear in the legal notice.
Any question about your data can be sent to them directly by email.
Data collected
This site collects nothing behind your back. Only three processes exist:
- Contact form: the name, email address, company (optional) and message you type. These are the fields you choose to fill in; nothing else is inferred.
- Abuse rate limiting: the sender’s IP address is held in memory for sixty seconds, solely to count submissions. It is never written to disk, never transmitted, never cross-referenced with anything.
- Audience measurement: the address of the page viewed, the site you came from, the approximate location (country, region, city), the operating system, browser and device type, recorded by the host’s measurement tool (Vercel Web Analytics). No cookie is set and your IP address is not stored: visits within a single day are linked by a fingerprint computed from the request and discarded within twenty-four hours. Only per-page totals remain afterwards, from which no one can be extracted.
Purposes and legal basis
Form data is used solely to answer your enquiry and, where relevant, to continue the exchange that follows from it.
The legal basis is the performance of pre-contractual measures taken at your request (GDPR article 6.1.b). Rate limiting rests on the publisher’s legitimate interest in protecting the service (article 6.1.f).
Audience measurement likewise rests on the publisher’s legitimate interest (article 6.1.f): knowing which pages are read, in order to improve the site. It is limited to aggregate statistics and serves no individual tracking.
No data is used for profiling, advertising or resale.
Retention
Messages received are kept in the publisher’s business mailbox for three years from the last contact, then deleted.
Rate-limiting data disappears after sixty seconds and does not survive a server restart.
The visit fingerprint used for audience measurement is discarded within twenty-four hours; only per-page totals remain, tied to no one.
Recipients
Your data goes to no one beyond the providers strictly needed to run the site, deliver your message and let it be read:
- Vercel Inc.Website hosting and audience measurement · United States
- Resend (Plus Five Five, Inc.)Delivery of form messages · Ireland (US-incorporated company)
- OVH SASBusiness mailbox · France
Transfers outside the European Union
The site is hosted, and its audience measured, by a provider established in the United States.
Messages sent through the form are processed on infrastructure located in Ireland. Because the provider operating it remains subject to US law, that processing is nonetheless governed as a transfer.
These transfers are governed by the European Commission’s standard contractual clauses and, where applicable, by those providers’ certification under the EU-US Data Privacy Framework.
Cookies and trackers
This site sets no cookies. The audience measurement described above writes nothing to your device and reads nothing from it: it does not follow you from one site to another, and does not recognise you from one day to the next.
One single value is stored in your browser, under the key “zora-theme”: your light or dark display preference. It never leaves your device, identifies no one, and counts as a preference strictly necessary to the service you asked for, exempt from consent on that basis.
That is why no banner is shown to you: there is nothing to consent to.
Security
The site is served over HTTPS only. Form messages travel encrypted to the delivery provider, then to the mailbox.
Your rights
You have rights of access, rectification, erasure, restriction, objection and portability over your data.
To exercise them, write to the site’s contact address. You will receive an answer within one month.
If that answer does not satisfy you, you may lodge a complaint with the CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France) or at cnil.fr.