Who is responsible
The controller of the personal data described here is the publisher of this website:
- Controller
- François Noel
- Address
- Lille, France
- Privacy contact
- francoisnoel62@gmail.com
No data protection officer has been appointed; the contact above handles every privacy request.
What we process and why
| Activity | Data | Purpose and legal basis | Kept for |
|---|---|---|---|
| Participation and contact forms | Name, professional email, organisation, country, role, the answers specific to each form, your message and, if you give it, a GitHub handle or organisation website. | To assess and answer your request. For participation paths, steps taken at your request before any agreement (GDPR Art. 6(1)(b)); for general inquiries, our legitimate interest in answering professional correspondence (Art. 6(1)(f)). | 12 months after our last exchange, then deleted automatically, unless you ask for deletion sooner. |
| Emails about your submission | Your email address and the form you used. | To confirm that we received your submission and to notify the team; same legal basis as the form. | The provider's delivery logs, per its own retention. |
| Abuse prevention on forms | A salted SHA-256 hash of your IP address and browser identifier; never the raw IP address. Cloudflare Turnstile receives your IP address and browser signals. | To limit repeated submissions and block bots: our legitimate interest in keeping the forms secure (Art. 6(1)(f)). | The hash: the rate-limit window, one hour by default, then deleted by a daily clean-up. Turnstile: per Cloudflare's policy. |
| Hosting logs | IP address, browser identifier, requested address, date and time. | To deliver and secure the website: our legitimate interest (Art. 6(1)(f)). | One hour, on the host's current plan. |
Required form fields are marked. Without them we cannot assess the request. No decision about you is made by automated means.
What we do not collect
The forms do not ask for guest data, credentials, API keys, operational exports or confidential commercial information; please do not include them. The website has no accounts, no payments, no newsletter, no advertising pixels, no retargeting and no audience-measurement tool. We do not sell or rent personal data.
Providers and transfers
These providers process personal data on our behalf, under a data processing agreement. Some are in the United States; each transfer relies on the safeguard shown.
| Provider | Role | Location | Transfer safeguard |
|---|---|---|---|
| Vercel Inc. | Hosts the website, runs the form handler and keeps request logs. | United States, with edge locations worldwide | EU-U.S. Data Privacy Framework certification |
| Neon (Databricks, Inc.) | Stores form submissions, encrypted, and short-lived rate-limit keys. | European Union (Frankfurt, Germany) | Data stored in the EU; any access from the United States is covered by the EU-U.S. Data Privacy Framework and standard contractual clauses |
| Resend, Inc. | Sends the acknowledgement to you and a notification to the team. | United States | EU-U.S. Data Privacy Framework certification and standard contractual clauses |
| Cloudflare, Inc. (Turnstile) | Checks that a form is submitted by a person rather than a bot. | United States | EU-U.S. Data Privacy Framework certification |
Cloudflare also uses Turnstile signals, as an independent controller, to improve its bot detection; see Cloudflare's Turnstile privacy addendum. Within the team, only the people who review submissions can read them.
Security
Form contents and email addresses are encrypted with AES-256-GCM before they are stored. Operational metadata, such as the form type, country and dates, is stored separately. Traffic to the website uses HTTPS.
Your rights
You can ask to access, correct or delete your data, to restrict its processing, to receive the data you gave us in a portable format, and object at any time to processing based on our legitimate interest. Write to francoisnoel62@gmail.com from the address you used in the form. We answer within one month and may ask you to confirm that the address is yours.
You can also lodge a complaint with the data protection authority of the country where you live or work, or where you believe the infringement took place. In France, it is the CNIL.
Cookies and browser storage
The website sets no advertising or audience-measurement cookie, so it does not ask for your consent. It stores only what it needs to work:
| Name | Stored by | Purpose | Duration |
|---|---|---|---|
theme | This website, in local storage | Remembers the light or dark theme you choose. | Until you clear your browser storage. |
| Turnstile | Cloudflare, on form pages | Strictly necessary security check that the form is submitted by a person. | Per Cloudflare's cookie policy. |
If an audience-measurement or other non-essential tool is ever added, this notice will be updated first and your consent requested where the law requires it.
Changes to this notice
Each version is dated at the top of this page. Every form submission records the version in force when it was sent.