privacy policy

The personal data controller for information collected via strivex.fr is:

• -Controller: Arthur Jean, Entrepreneur individuel - micro-entreprise, trading as StriveX.
• -Address: 108 rue de la Gilarderie, 44200 Nantes, France.
• -Privacy contact: arthur.jean@strivex.fr
• -DPO: No data protection officer is currently appointed. The privacy contact address is used for GDPR requests.

Privacy contact: arthur.jean@strivex.fr

The site does not provide an active form, user account, online checkout, or newsletter. Data may be collected in the following cases:

• -Email contact: first name, last name, email address, message content, company, role, technical need and any attachments you choose to send.
• -Site usage: IP address handled by the host, browser type, operating system, visited URL, timestamp, referrer, and technical information needed for security and delivery.
• -Audience measurement: page views, URL, referrer, approximate country or region, browser, system, device type, and Vercel Analytics script version, all in aggregate form.
• -Technical monitoring: JavaScript or server errors, filtered URL and query string, runtime information, technical traces, breadcrumbs, and environment data sent to Sentry when Sentry DSN is configured.
• -UI preference: The theme preference is stored locally in browser storage under the key theme.

Each processing activity has a defined purpose and a distinct legal basis:

• -Replying to inbound emails: pre-contractual steps when the request concerns a service, or legitimate interest in answering incoming requests.
• -Delivering a service: contract execution for exchanges needed for an agreed audit, development, or support engagement.
• -Securing the site: legitimate interest in preventing abuse, diagnosing errors, maintaining site availability, and protecting infrastructure.
• -Measuring audience: legitimate interest in understanding site usage with Vercel Analytics, without third-party cookies and without advertising tracking.
• -Meeting legal obligations: legal obligation for accounting, contractual, or administrative documents when a commercial relationship exists outside the site.

Data are accessed only by people and providers necessary to the purposes above:

• -StriveX: Arthur Jean accesses emails and information needed to respond to requests and deliver services.
• -Vercel Inc.: hosting, site delivery, technical logs, and Vercel Analytics.
• -Sentry: error monitoring and technical diagnostics when Sentry environment variables are configured.
• -Competent authorities: data are shared only when legally required or in response to a valid legal request.

The site relies on U.S.-based providers. Some technical data may therefore be processed outside the EU.

• -Vercel: Vercel Inc. hosts and serves the site from global infrastructure. Applicable guarantees are those provided in Vercel's contractual and compliance documentation.
• -Sentry: Sentry may receive error and diagnostic events when DSN is configured. Applicable guarantees are those provided in Sentry's contractual and compliance documentation.
• -Minimisation: default local configuration disables voluntary transmission of directly identifiable data, and filters cookies, secrets, emails, tokens, and IP addresses in Sentry events. Sentry Session Replay is off by default.

Data are kept only as long as proportionate to their purpose:

• -Email requests: up to 3 years after last exchange for prospects, unless a deletion request or legal obligation applies.
• -Service data: for the contractual relationship period, then according to prescription periods and applicable accounting obligations.
• -Technical logs: for the time needed for security, diagnostics, and service stability, according to host and monitoring tool policies.
• -Vercel Analytics: metrics exposed to the site are aggregated. Technical retention periods are governed by Vercel's applicable policies.
• -Theme preference: stored locally in your browser until you delete it or reset the browser.

The site does not use advertising cookies, marketing pixels, or retargeting trackers.

• -Local storage: theme preference is stored locally to avoid repeatedly asking you for your display choice.
• -Vercel Analytics: the tool measures audience without third-party cookies and provides aggregated page view statistics.
• -Sentry: the tool is used for error diagnostics. Session capture is disabled by default and should only be enabled for proportionate diagnostic use.
• -Future changes: if a consent-required tool is added, it must be blocked before consent and documented in this policy.

StriveX applies technical and organizational measures to reduce risks to processed data:

• -HTTPS/TLS on the public website.
• -Security headers, CSP policy, and browser permission restrictions.
• -No voluntary transmission of directly identifiable data in Sentry.
• -Application-level filtering of cookies, tokens, emails, IPs, and secrets in error events.
• -Restricted access to deployment and monitoring accounts.

Under GDPR, you can exercise the following rights:

• -Right of access, rectification, and erasure.
• -Right to restriction of processing.
• -Right to object where processing is based on legitimate interests.
• -Right to portability where GDPR conditions are met.
• -Right to withdraw consent if a future processing relies on consent.

To exercise these rights: arthur.jean@strivex.fr

In short, StriveX limits data collection to what is needed to serve the site, answer inbound emails, measure audience without third-party cookies, and diagnose technical errors.

• -No active form, user account, online payment, or newsletter exists on the site.
• -Vercel Analytics is used for aggregated statistics without third-party cookies.
• -Sentry is limited to technical diagnostics and Session Replay is disabled by default.
• -GDPR requests should be sent to the privacy contact address listed on this page.

Privacy contact: arthur.jean@strivex.fr