Legal
Privacy policy
This website has no trackers, no analytics, no advertising and no third-party content. It only processes the data needed to reply to you and to keep the site secure.
Last updated: 23 September 2026
Who is responsible
The data controller is Mattéo Duprat, contactable by email at dupratmatteo.pro
Contact form
What is collected: the name, email address and message you enter.
Why: only to read your message and reply to you. The legal basis is my legitimate interest in answering requests you start (GDPR, article 6(1)(f)).
Where it goes: the form sends your message by email, through my host’s mail server, to my mailbox, hosted by Google (Gmail). Google may process messages outside the European Union, under the EU–US Data Privacy Framework. Messages are not stored on the web server, and their content is never logged.
How long: messages are kept in my mailbox for as long as the exchange requires, then deleted at the latest three years after our last contact.
The form never sends an automatic copy or acknowledgement to the address you enter.
Protection against abuse
To limit spam, the server keeps a pseudonymised trace of each submission: a keyed hash of your IP address and the time of sending. Without the server’s secret key it cannot be turned back into your IP address, and it is deleted after at most 24 hours.
The form also uses a hidden field and a minimum filling time. No CAPTCHA and no third-party anti-spam service is used.
Server logs
Like any web server, my host Infomaniak records technical access logs (IP address, date and time, requested page, browser identifier) for security and operation. They are kept for a limited period set by the host, as described in Infomaniak’s own privacy policy.
Cookies and local storage
No tracking or advertising cookies are used, which is why there is no cookie banner.
lang (cookie): set only when you choose a language with the language switch, so that the home address opens in that language. Kept for 12 months. Strictly necessary for a feature you requested.
theme (local storage in your browser): set only when you choose a light or dark theme. It never leaves your browser.
Your rights
You can ask to access, correct or delete your data, restrict or object to its processing, or receive it in a portable format, by writing to dupratmatteo.pro
If you think your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr (opens in a new tab)).
Security
The website is served over HTTPS only, with strict security headers and a Content Security Policy. It loads no external resources.