Privacy
Last updated:
This page explains what personal data this site (theopnv.com) processes, why, and what rights you have under the GDPR.
Data controller
Théo Penavaire, who runs this site.
Legal entity and organisation number: to be added.
For any question about your data, write to [email protected].
Cookies
This site sets no cookies on a normal visit. Some features load third-party scripts, which may set their own cookies, only when you use them:
- Comments. Blog posts show a “Load comments” button. Clicking it loads giscus, which uses GitHub Discussions. Nothing loads from giscus.app or github.com before you click.
- Newsletter form. Focusing the email field loads Brevo’s form script and Cloudflare Turnstile, which blocks spam signups. Nothing loads from those domains before you use the form.
- Booking. The contact page can embed Cal.com to book a call. It loads only on that page.
- Buy Me a Coffee. Blog posts load the Buy Me a Coffee button from buymeacoffee.com.
What is processed, and why
| Data | Purpose | Legal basis | Processor |
|---|---|---|---|
| IP address in hosting logs | Serving the site, security | Legitimate interest | Cloudflare (host) |
| Aggregated visit statistics (pages, referrer, country) | Understanding which pages help visitors | Legitimate interest | Umami (cookieless) |
| Email address | Sending the newsletter | Consent (you submit the form) | Brevo (Sendinblue SAS) |
| Form interaction signals | Blocking automated signups | Legitimate interest | Cloudflare (Turnstile) |
| Name, email, booking answers | Scheduling a call with you | Pre-contractual steps | Cal.com |
| GitHub identity, comment content | Publishing blog comments | Consent (you load comments and sign in) | giscus / GitHub |
| Data collected by the button script | Showing the Buy Me a Coffee button | Legitimate interest | Buy Me a Coffee |
Umami does not use cookies or local storage and does not track you across sites. It uses your IP address briefly to compute a daily, salted visitor count, then discards it.
Retention
- Newsletter addresses stay until you unsubscribe (every email has a link) or ask for deletion.
- Analytics data is aggregated and not tied to a person.
- Booking data stays as long as needed to prepare and follow up on the call.
- Comments stay in the linked GitHub Discussions until you or GitHub remove them.
Transfers outside the EU
Some processors (Cloudflare, GitHub, Brevo, Cal.com, Buy Me a Coffee) may process data outside the EU/EEA. In that case they rely on their own GDPR safeguards, such as Standard Contractual Clauses.
Your rights
Under the GDPR you can ask to access, correct or delete your personal data, object to or restrict its processing, and get a copy in a portable format. Write to [email protected]. You can also complain to your data protection authority.
Changes
This page changes when the site’s tools change. The date at the top shows the last update.