Skip to content
Aymeric Mas, home
Back to the site

Privacy policy

This site is built to collect as little data as possible: no account, no cookies, no ads, no stored forms. Here is exactly what is processed, why, and how to exercise your rights under the General Data Protection Regulation (GDPR).

Data controller

Aymeric Mas, publisher of the site (see the legal notice). For any question about your data: aymeric.mas.dev@gmail.com.

Cookies and local storage

This site sets no cookies, neither for advertising nor for analytics, so no consent banner is needed.

To work, it saves a few preferences in your own browser. They are never sent anywhere and you can clear them at any time from your browser settings:

theme, theme-rose
your light or dark theme, and the Pink City theme once unlocked
am-secrets
the site secrets you have already found
am-terminal-history, am-terminal-last-login
the hidden terminal's history
am-assistant (session storage)
your conversation with the AI assistant, cleared when you close the tab or press “Start over”

The “Quick brief” AI assistant

When you write to the assistant, your messages go to the site's server, which forwards them to OpenRouter, Inc. (United States). OpenRouter has them processed by the provider of the language model in use (free models, for example Google Gemma or NVIDIA Nemotron) to generate the answer.

  • The site does not keep your conversations on its servers and does not pass them on to Aymeric. They stay in your browser unless you choose to email him your brief.
  • Some free models may keep messages under their provider's terms. So do not share sensitive data or confidential information.
  • Purpose: answer your request and draft a first brief. Legal basis: steps taken at your request before entering into a contract (article 6(1)(b) GDPR).

Abuse protection

To stop bots from draining the assistant, messages are limited to 20 per 10 minutes and 60 per day. Your IP address is used as the counting key and kept for 24 hours at most, in the server's memory or at Upstash, Inc. Legal basis: legitimate interest (service security).

Analytics

The site uses Vercel Web Analytics, with no cookies and no persistent identifier. Statistics are aggregated and anonymous: page views, referring site, country, device type, operating system and browser. A visitor is recognised by a fingerprint of the request that is discarded after 24 hours. Legal basis: legitimate interest (improving the site).

Email and phone

When you write or call, your contact details and message are used only to answer you and, where relevant, to prepare a quote. They are kept for 3 years after our last exchange, then deleted; a client's accounting records are kept for 10 years, as French law requires. Legal basis: pre-contractual steps and performance of a contract (article 6(1)(b) GDPR).

Hosting and third-party content

  • Hosting: Vercel Inc. (United States) processes the technical logs of each request (IP address, browser, requested page) for security and to keep the site running.
  • 3D robot: when the robot wakes up, your browser downloads the scene from Spline's servers and, depending on the scene, rendering modules from the public CDNs unpkg.com and gstatic.com. These servers receive your IP address, as with any web request.
  • Fonts: they are hosted on the site itself; no request is made to Google Fonts.

Transfers outside the European Union

Vercel, OpenRouter, Upstash, Spline and the CDNs listed above may process data in the United States. Depending on the provider, these transfers rely on the EU–US Data Privacy Framework or on the European Commission's standard contractual clauses.

Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, and to set instructions for what happens to it after your death. To exercise them, write to aymeric.mas.dev@gmail.com: you will get an answer within one month.

Providing data is always optional: without an email address, I simply cannot reply. No automated decision with legal effects is made from your data; the AI assistant only drafts a brief that I then review with you.

If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority: cnil.fr, or by post at 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.

Changes

This policy may change along with the site. The date of the last update is shown at the top of the page.

See also Legal notice