Legal notice and privacy

Site published by Andi MANIETA, Épinay-sur-Seine, France.

Contact: contact@andimanieta.com.

Hosting provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The site is served by Firebase Hosting.

The contact form and the audience measurement rely on Cloud Functions and Firestore, hosted in Belgium (europe-west1 region), provided by Google Ireland Limited. Firebase App Check, from the same provider, protects the contact form only.

Google reCAPTCHA Enterprise protects the form. It analyses the visitor's behaviour on the page to tell a human from a robot, sends technical browsing data to Google and may set its own cookie on the google.com domain. Its privacy policy and terms are available at policies.google.com/privacy and policies.google.com/terms.

Mailgun Technologies (part of Sinch), in the United States, delivers the emails: the notification received by the publisher, the acknowledgement sent to the visitor, and the visit notification described below. This transfer outside the European Union is governed by the European Commission's standard contractual clauses.

Scheduling a phone call relies on Google Calendar (provided by Google Ireland Limited) or Calendly (provided by Calendly LLC), based on visitor choice. No cookie is set when viewing the page: the chosen widget is only loaded upon your explicit consent, given by selecting your preferred calendar tool, which enables the integration and sets its technical cookies. You can also open the schedule directly on the selected provider’s website.

The contact form collects your name, email address, company (optional), subject and message.

The date of sending, the language you chose, your browser (user agent) and the time spent filling in the form are also recorded.

A fingerprint of your IP address and a fingerprint of your email address, salted with a secret key, are used only to limit the number of submissions. They are stored separately, with no link to the message.

This data is used solely to reply to a professional enquiry. Processing relies on your consent, given through the checkbox in the form, and on the publisher's legitimate interest in preventing abuse.

The message is forwarded to the publisher by email and an acknowledgement is sent to the address you provided.

The site measures its own audience, for the publisher's sole use. No data is sent to a third party measurement tool, no advertising profile is built and your browsing on other sites is never tracked.

The following are recorded: the approximate city and country, the reading language, the device type, the length of the visit, the sections viewed, the scroll depth and the actions taken on the page, such as switching language or clicking a contact link.

Each visit is given a randomly drawn identifier, kept by your browser for the lifetime of the tab. It disappears when the tab is closed and cannot recognise you on a later visit. That identifier has a second use, described in the Conversation with the publisher section: it lets the publisher address a message to a visit in progress. He never sees its value, only a short fingerprint of it, salted with a secret key.

Your IP address is never stored in plain form by the site. While the call is being handled, it is used only to derive the city and country from a table embedded in the function, with no call to any outside service. It is then replaced by a fingerprint salted with a secret key, from which it cannot be reconstructed.

The city and country come from the DB-IP Lite database, provided by db-ip.com under the Creative Commons Attribution 4.0 licence. Their precision is approximate, in particular on mobile networks.

These measurements are stored in Firestore, in Belgium (europe-west1 region), and deleted automatically after ninety days. Processing relies on the publisher's legitimate interest in knowing how the site is visited and in improving its content.

When a visit reaches a threshold of attention, the publisher receives an email notification repeating the city, the country, the device type, the length and the sections viewed. It contains neither your IP address, nor its fingerprint, nor the identifier of the visit. This notification is sent at most once per visit.

You may object to this measurement at any time, with the button below. Your refusal is stored in your browser, under the andimanieta.analytics key, and honoured as long as you do not clear its local storage. If your browser sends the Global Privacy Control signal, it is honoured with no action on your part.

The site shows no consent banner: the measurement described here is limited to the audience of this one site, for the publisher alone, with no third party tool, and is never combined with data from another site or another service. The only connection that exists is internal to this site, and it is described in the Conversation with the publisher section: the identifier of a visit in progress lets the publisher address a message to it. Refusing the measurement, with the button below, applies to both: no further visit identifier is drawn, and the one for a visit already under way disappears when the tab is closed.

The site offers a conversation window that lets you write directly to the publisher. No bot and no language model answers there: messages are read and handled by Andi MANIETA himself.

The following are recorded: the text of the messages you send, their date, the approximate city and country derived from your IP address under the same conditions as the audience measurement, and your email address if you choose to leave it.

The email address is optional. It is used only to reply once you have left the site, and never to write to you on another occasion.

Processing relies on the publisher's legitimate interest in replying to those who contact him. A conversation is created as soon as you open the window yourself, before your first message: at that point it holds only its date, the approximate city and country, the reading language and the salted fingerprint of your IP address. If you write nothing, it stays empty and is deleted after ninety days.

When the publisher is reachable, he may start the conversation himself. He does not write to a person but to a visit in progress, the one his back office shows him live, identified by the visit identifier described above. His message is written into the document that carries his availability, together with the identifier of the visit it targets. It is served to you for four minutes only, and the entry leaves the document at the next write, in particular whenever he toggles that availability. Your browser receives it in the answer to the question it already asks at regular intervals, every two minutes, and every fifteen seconds while the publisher is reachable: is he there, and has he left a message. It is asked only from the home page, the only place where the window exists, and stops being asked as soon as the tab goes to the background; while the window is closed, it also stops being asked once you stop acting on the page.

The window then opens on its own to show you that message, without taking the keyboard. As long as you have not replied, opening or closing it creates no conversation: nothing is recorded on that occasion, and the conversation only comes into being when you reply. This possibility rests entirely on the visit identifier: if you refuse the audience measurement, through the button in the previous section, through the mesure=off parameter in the address or through the Global Privacy Control signal, your visits receive no identifier, they do not appear in the live view and no message can be addressed to them there.

Closing the window, hiding the automatic invitation or simply not replying only counts for the tab where you do it, and is sent to no one: the publisher does not learn that you turned his message down, only that you did not reply. Closing the tab erases the visit identifier, and with it any way of writing to you again.

Conversations are kept for ninety days, extended to twelve months if you leave your address, then deleted automatically.

The content of your messages is hosted in the European Union. A notification repeating your message is sent to the publisher by Mailgun, in the United States, under the conditions described above.

The conversation identifier is randomly drawn and kept by your browser for the lifetime of the tab, under the andimanieta.chat key. It disappears when the tab is closed. The same tab memory holds two markers, which disappear with it: under the andimanieta.chat.invited key, the fact that the automatic invitation no longer has to be offered to you, and under the andimanieta.chat.invite key, the date of the publisher's message already shown to you, so that a window you closed stays closed.

Messages are kept for twelve months in the site database, then deleted automatically.

The IP address fingerprint expires after one hour and the email address fingerprint after twenty-four hours. Both are then deleted automatically.

On every call to the site functions, form submission and audience measurement alike, Google Cloud technical logs keep the plain IP address for thirty days.

Audience measurements are kept for ninety days in the site database, then deleted automatically. The site itself sets no cookie.

The site stores in your browser your chosen language and theme (andimanieta.locale and andimanieta.theme keys), your refusal of the measurement if any (andimanieta.analytics key) and, for the lifetime of the tab only, the identifier of the current visit (andimanieta.session and andimanieta.session.state keys). When you first interact with the form, reCAPTCHA Enterprise (_grecaptcha key) and App Check (Firebase IndexedDB database) also store there the technical tokens required for bot protection.

You have the right to access, rectify and erase the personal data concerning you, and to object to its processing.

For the audience measurement, you may object directly from the Audience measurement section above, with no request to the publisher.

To exercise these rights, write to contact@andimanieta.com.

You may also lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).