Who is responsible
Cœur du Web, 58 rue de Monceau, 75008 Paris, France. Contact: chargement de l'email… .
We are a French company. That means the General Data Protection Regulation applies to us as a matter of law, and it sets the baseline for everything below. It also means we are subject to the supervision of the French data protection authority.
What this site collects
Three categories, and nothing else.
Contact form data. Name, email address, company name (optional), and whatever you write in the message field. Submitted only after you deliberately send the form.
Audience measurement. Pages viewed, time on page, referring source, device type. Collected in anonymized mode.
Technical logs. IP address, user agent, request timestamps. Kept for the security of the site.
In the vocabulary the California statute uses, that is identifiers and internet or other electronic network activity information. We do not collect biometric data, precise geolocation, financial account details, health information, or any other category the statute treats as sensitive. We do not ask your age, and this site is not directed at children.
Why we collect it
To answer what you ask us. To understand which pages get read so we can write better ones. To keep the site from being abused. Nothing else.
No automated decision is made about you on the basis of this data. There is no advertising profile, no lookalike audience, no scoring of any kind.
We do not sell or share your personal information
No personal information is sold, for money or for anything else of value. None is shared for cross-context behavioral advertising, which is the specific practice the California statute calls "sharing". There are no advertising cookies on this site and no retargeting pixels. Because we do not do either of these things, there is no opt-out for you to exercise, and a Global Privacy Control signal from your browser changes nothing about how we treat you.
Who else touches the data
Our own team, and the following service providers, each for one stated purpose:
- Mailjet, to deliver the emails the contact form generates. Hosted in France.
- PlanetHoster, our hosting provider.
- Google Analytics 4 (Google LLC, United States), audience measurement.
- Microsoft Clarity (Microsoft Corporation, United States), anonymized session replay and heatmaps, used to find where the site is confusing.
- Google reCAPTCHA v3 (Google LLC, United States), invisible spam filtering on the contact form, so you never have to click a grid of images.
Those three third-party tools set technical cookies and transmit your IP address, user agent and browsing signals to their respective publishers in the United States. Transfers outside the European Union rely on the European Commission's standard contractual clauses and on those publishers' Data Privacy Framework certifications.
Beyond these providers, nothing is passed on. No data broker, no partner network, no list.
How long we keep it
- Contact form data: three years from your last contact with us. Longer if we go on to work together, because accounting records have their own legally mandated retention.
- Audience measurement: fourteen months.
- Technical logs: twelve months.
Your rights
Everywhere. You can ask what we hold about you, ask us to correct it, ask us to delete it, ask for a copy in a portable format, ask us to restrict what we do with it, or object to a particular use. Write to chargement de l'email… . We answer within one month.
If you are in California. The same rights exist under the California Consumer Privacy Act as amended: the right to know what is collected and why, the right to delete, the right to correct, the right to opt out of sale or sharing, and the right to limit the use of sensitive personal information. We will respond within 45 days, and will tell you if we need the extension the statute permits. You may use an authorized agent, in which case we will ask for proof that you appointed them. We will never treat you worse for exercising any of this, which is easy for us to promise since we do not have tiers, loyalty programs or pricing that could vary.
One thing worth saying plainly, because most privacy pages will not say it: we almost certainly are not a "business" as the California statute defines one. That definition turns on thresholds, and we do not meet any of them. We do not have twenty-five million dollars in annual revenue, we do not handle the personal information of a hundred thousand consumers or households, and we derive no revenue at all from selling personal information. Claiming to be CCPA compliant would therefore be a slightly misleading badge. We extend the rights anyway, because they are reasonable and because we would want them.
If you are in the European Union. In addition to the above, you may lodge a complaint with your national supervisory authority, or with the French authority, the CNIL, at cnil.fr.
Your consent
The audience measurement tools (Google Analytics and Microsoft Clarity) load only after you explicitly agree. Until you choose, nothing is sent: no choice counts as a refusal.
The banner offers "Decline" and "Accept" at the same size, with the same click area and the same visual weight, because declining should be as easy as accepting. Your choice is stored locally in your browser and never transmitted.
You can change it at any time: the Cookies control in the footer brings the banner back. Spam filtering on the contact form stays active either way, because it is necessary to the service.
Cookies
Strictly necessary cookies are active by default: session, security, preferences. Audience measurement and reCAPTCHA cookies are anonymized server-side. You can refuse them through your browser settings or a blocking extension, and the site will keep working. There are no advertising cookies and no retargeting.
Changes to this notice
This notice may change. The date at the top of the page is the date of the last substantive revision. If a change is significant, it will be visible here rather than announced in a footnote.