In short
This site sets no tracking cookie, uses no advertising service and sells no data. It is designed to work without a consent banner, because there is nothing to consent to.
Analytics
To know which pages and projects are viewed, the site records anonymous events (page view, project view, outbound link). Each visit is tied to an ephemeral identifier computed from your IP address and browser, hashed with a salt that changes every day: you cannot be recognised from one day to the next and the IP address is never stored.
Your browser’s “Do Not Track” and “Global Privacy Control” signals are honoured: no event is recorded when they are on. Raw events are deleted after 13 months.
To check that the site stays fast, your browser also sends, when you leave the first page you visited, a few performance measurements (display time, responsiveness, layout stability) with the page path and the screen width. They are tied to no identifier, not even a temporary one, follow the same signals and are deleted after 13 months.
If a technical error happens in your browser, its message and the page concerned are sent to the site to be fixed, with no information about you; these reports follow the same signals. Likewise, your browser itself reports to the site the resources its security policy (CSP) blocked: only the address of the page and that of the resource are kept. These reports are erased at the latest 90 days after the last occurrence.
Local preferences
Your language and theme (light or dark) are remembered in your browser’s local storage (localStorage), and the fact that you have already seen the opening animation in session storage (sessionStorage). This information never leaves your device.
Technical cookie
A single cookie is set on the public site: XSRF-TOKEN, a random token that protects the contact form against forged requests (CSRF). It holds no information about you, is only read by this site and is deleted when the browser closes. Being strictly necessary for the security of the service, it is exempt from consent. The back office additionally uses a session cookie (PSESSION, 8 hours) reserved for its owner.
Contact form
If you write to me, your name, e-mail and message are stored on the site’s server and can only be read from the back office.
This data is kept for as long as needed to reply, and twelve months at most. It is shared with no one else. Legal basis: your consent (article 6.1.a GDPR).
Fonts, icons and third-party resources
Fonts and icons are served from the site’s own server: your browser contacts neither Google Fonts nor any third-party CDN to display the pages. Only project pages may, at your request (“Live” button), load the presented site in a frame: that third-party site then applies its own privacy policy.
Hosting and processors
The site is hosted on a personal server located in France. Traffic goes through the Cloudflare, Inc. network, which acts as a firewall and CDN and may process your IP address for that purpose, under its own privacy commitments.
Your rights
You have the right to access, rectify, erase and object to the processing of your data. Write to [email protected]. You may also lodge a complaint with the CNIL (cnil.fr).