Privacy policy
What I collect, why, how long I keep it, and how you stay in control. The short version: very little, and nothing without your consent.
Last updated: August 22, 2026.
In one sentence. A single tracker, Google Analytics, and only if you accept it. No advertising, no profiling, no resale. The only other data I receive is the data you choose to send me: a message through the contact form, or a review under an article.
This site is published under French law, and this policy is governed by it. This English version is a translation provided for convenience; the French version is the reference text.
Who processes your data
The data controller is Anthony Courtin, sole proprietor (entrepreneur individuel) and publisher of this site. For any question or to exercise your rights: anthony@astrak.agency. Full contact details are available in the legal notice.
Given the nature and volume of the processing, I am not required to appoint a data protection officer. So I am the one who answers you, directly.
What I collect, and why
| Processing | Data | Legal basis | Retention |
|---|---|---|---|
| Contact form Answering your request and, where applicable, preparing a proposal. |
Name, email, phone number, website, message. | Pre-contractual measures taken at your request. | 3 years after our last exchange. |
| Reviews under an article Publishing your feedback at the bottom of the article concerned. |
First name (optional), rating, comment. | Your consent, given by submitting the form. | Until you ask for its removal. |
| Audience measurement Knowing which content is read, by how many people and from which sources. |
Page views, referral source, device type, truncated IP address, measurement identifier set by a cookie. | Your consent, given in the cookie panel. Can be withdrawn at any time. | 13 months. |
| Server technical logs Delivering pages, keeping the site secure and diagnosing outages. |
IP address, date and time, requested page, browser. | Legitimate interest in running the site. | A short period, set by the host. |
No profiling, no automated decision-making, no prospecting from purchased lists. Your data is never sold, rented or passed on for advertising purposes.
Who else has access to it
Three service providers are involved on the technical side, each within a specific scope:
- FormSubmit forwards contact form submissions to my inbox. The fields you fill in pass through this service when you submit the form. Its privacy policy.
- Google Ireland Limited provides Google Analytics 4 and processes audience measurement data, only if you have given your consent. Its privacy policy.
- Netlify hosts the site and receives the reviews posted under articles. In that capacity, its servers also record technical connection logs. Its privacy policy.
These providers may process data outside the European Union. Such transfers are governed by the European Commission's standard contractual clauses.
Cookies and local storage
Only one tool sets cookies here: Google Analytics 4, to measure the site's audience. It only starts after you give your consent. Until you click "Accept all", no Google script is loaded and no cookie is set: refusal is the default state, including if you close the page without choosing anything.
No advertising cookies, no social media buttons that track you, no sharing for commercial purposes.
What is stored, and for how long
| Category | Trackers | What it is for | Duration |
|---|---|---|---|
| Strictly necessary Exempt from consent, cannot be turned off. |
Local storage: ac-consentement, ac_avis_<article>. |
Remembering your consent choice, and not losing the draft of a review you are writing. Nothing leaves your device. | 6 months for the choice, until submission for the draft. |
| Audience measurement Subject to your consent. |
Google Analytics 4 cookies: _ga, _ga_<id>. |
Counting visits, telling visitors apart, knowing which pages and which sources work. IP address truncated by Google. | 13 months. |
Giving, refusing or withdrawing your consent
The panel shown on your first visit offers "Accept all" and "Reject all" at the same level, one click each, plus a "Customize" button so you can tick only what you want. No option is preselected against your interest, and making no choice counts as refusing.
You can change your decision at any time: the "Manage cookies" link at the bottom of every page reopens the panel with your current settings. Withdrawing your consent is as easy as giving it, and does not affect what was measured before.
Your choice is kept for 6 months, in line with the recommendation of the CNIL (the French data protection authority). After that, you are asked once again. Clearing your browser's site data erases everything, with no consequences at all.
Technically, your consent is passed on to Google through Consent Mode: until it is granted, measurement also remains explicitly denied on Google's side.
Your rights
You have the right to access, rectify, erase, restrict, object to and port the data that concerns you. When processing is based on your consent, you can withdraw it at any time, without affecting what was done before.
One single address for all of this: anthony@astrak.agency. I reply within one month, usually much sooner. You will only be asked for proof of identity if there is serious doubt about who you are.
If my answer does not satisfy you, you can lodge a complaint with the CNIL, the French supervisory authority: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.
Security
The site is served exclusively over HTTPS, with HSTS and standard security headers. A content security policy (CSP) restricts the allowed scripts to a closed list: apart from Google Analytics, loaded only with your consent, no third-party domain can run code on these pages. Since the site is static, there is no public database to compromise: messages go straight to an inbox.
Changes to this policy
This page will change if the processing changes, for example if I ever added an audience measurement tool. The update date at the top of the page is authoritative, and any change that genuinely affects you will be announced on the site.