Privacy policy
This site is built to collect as little data as possible: no account, no cookies, no ads, no stored forms. Here is exactly what is processed, why, and how to exercise your rights under the General Data Protection Regulation (GDPR).
Data controller
Aymeric Mas, publisher of the site (see the legal notice). For any question about your data: aymeric.mas.dev@gmail.com.
The “Quick brief” AI assistant
When you write to the assistant, your messages go to the site's server, which forwards them to OpenRouter, Inc. (United States). OpenRouter has them processed by the provider of the language model in use (free models, for example Google Gemma or NVIDIA Nemotron) to generate the answer.
- The site does not keep your conversations on its servers and does not pass them on to Aymeric. They stay in your browser unless you choose to email him your brief.
- Some free models may keep messages under their provider's terms. So do not share sensitive data or confidential information.
- Purpose: answer your request and draft a first brief. Legal basis: steps taken at your request before entering into a contract (article 6(1)(b) GDPR).
Abuse protection
To stop bots from draining the assistant, messages are limited to 20 per 10 minutes and 60 per day. Your IP address is used as the counting key and kept for 24 hours at most, in the server's memory or at Upstash, Inc. Legal basis: legitimate interest (service security).
Analytics
The site uses Vercel Web Analytics, with no cookies and no persistent identifier. Statistics are aggregated and anonymous: page views, referring site, country, device type, operating system and browser. A visitor is recognised by a fingerprint of the request that is discarded after 24 hours. Legal basis: legitimate interest (improving the site).
Email and phone
When you write or call, your contact details and message are used only to answer you and, where relevant, to prepare a quote. They are kept for 3 years after our last exchange, then deleted; a client's accounting records are kept for 10 years, as French law requires. Legal basis: pre-contractual steps and performance of a contract (article 6(1)(b) GDPR).
Hosting and third-party content
- Hosting: Vercel Inc. (United States) processes the technical logs of each request (IP address, browser, requested page) for security and to keep the site running.
- 3D robot: when the robot wakes up, your browser downloads the scene from Spline's servers and, depending on the scene, rendering modules from the public CDNs unpkg.com and gstatic.com. These servers receive your IP address, as with any web request.
- Fonts: they are hosted on the site itself; no request is made to Google Fonts.
Transfers outside the European Union
Vercel, OpenRouter, Upstash, Spline and the CDNs listed above may process data in the United States. Depending on the provider, these transfers rely on the EU–US Data Privacy Framework or on the European Commission's standard contractual clauses.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, and to set instructions for what happens to it after your death. To exercise them, write to aymeric.mas.dev@gmail.com: you will get an answer within one month.
Providing data is always optional: without an email address, I simply cannot reply. No automated decision with legal effects is made from your data; the AI assistant only drafts a brief that I then review with you.
If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority: cnil.fr, or by post at 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.
Changes
This policy may change along with the site. The date of the last update is shown at the top of the page.
See also Legal notice