Privacy

Who is responsible

Valentin Vivier, Cherbourg, France. For anything on this page, write to valentin@viviersoft.com.

Analytics, without cookies

This site uses PostHog to count page views. PostHog Inc. is a third party and acts as my processor: the data is stored on PostHog Cloud, on their infrastructure, not on mine.

It runs in PostHog's cookieless mode, which means the site stores nothing at all in your browser: no cookie, no localStorage, no identifier of any kind. That is also why there is no cookie banner. To avoid counting the same visitor twice in a day, PostHog's servers derive a temporary identifier from a hash of your IP address and browser signature, mixed with a random value that changes every day and is then discarded. The identifier cannot be reversed back to your IP, stops matching you after 24 hours, and never exists on your device.

Requests are sent to f.dosismart.com, which is a reverse proxy running on a domain of mine. That is there so the requests are first-party and survive tracker blocking. It does not change where the data ends up: it is forwarded to PostHog.

What is collected

• pages visited, and the referring page,
• browser, operating system, screen size, and preferred language,
• an approximate location derived from your IP, no finer than city level,
• Core Web Vitals: how fast pages load and render in your browser, so I can spot when the site gets slow,
• clicks on the links to my GitHub and LinkedIn profiles, so I can tell whether anyone follows them. Those two links are the only clicks recorded.

General click tracking, session recording and surveys are all switched off, so apart from the two profile links above there is no record of what you clicked, no replay of your mouse movement or keystrokes, and no behavioural profile. I do not collect names, email addresses, or account data, because this site has no accounts and no forms.

Legal basis, retention and transfers

The legal basis is my legitimate interest in knowing which pages get read and how fast they load, under article 6(1)(f) GDPR. Article 82 of the French Data Protection Act, the rule that requires consent banners, applies to information stored on or read from your device; this setup does neither. What tips the balance in favour of running it at all: the data is minimal, it identifies nobody for longer than a day, and you can switch it off (below).

Analytics data is kept for as long as the retention configured on my PostHog project, and is deleted after that. Write to me if you want the current figure. Because PostHog Inc. is a company established outside the EU, using it may involve a transfer of personal data outside the European Union, governed by their terms.

Opting out

The site honours Do Not Track and Global Privacy Control. Turn either one on in your browser or install a GPC extension, and no event is sent at all. Content blockers that filter analytics requests work too, and the site functions identically either way. You can also object by email, though in practice the browser signal is the reliable route, since data that stops matching you after a day is hard to find afterwards.

Your rights

You can ask for access to, correction of, or deletion of your data, and you can object to its processing. Write to valentin@viviersoft.com and I will answer within a month. In practice the data is anonymous, so include enough detail for me to find it. If you think I have handled this badly, you can complain to the CNIL.

Hosting and other requests

The site is served from my own Kubernetes cluster. The web server keeps standard access logs, which include IP addresses, for 7 days for security and debugging. That is a legitimate interest under article 6(1)(f) GDPR and is independent of the analytics choice above.

Fonts are served from this domain, so loading a page does not reveal your IP to Google or any other font host. Comments, embedded videos, and social widgets are not used anywhere on this site. Apart from the analytics above, which you have to opt into, a page load contacts no server other than mine.