Legal Notice and Privacy

This site is a personal and non-commercial blog. It carries no advertising and sells nothing.

Contact: joseph@vidal-rosset.net

The site is hosted on a dedicated server rented from Scaleway (Online SAS), 8 rue de la Ville l’Évêque, 75008 Paris, France. All data described below stays on that machine, inside the European Union.

• It sets no tracking cookie of any kind.
• It uses no third-party audience measurement: no Google Analytics, no Matomo, no external counter.
• It loads no resource from a third-party server. MathJax is self-hosted, the fonts are self-hosted, the comment system is self-hosted, the stylesheet and images are local. The logos in the footer are local files; the links behind them, like any external link in an article, are followed only if you click them.
• It embeds no social network button, no advertising tag, no fingerprinting script.
• Nothing is transmitted to anyone, ever, for any purpose.

Consequently there is no consent banner on this site: there is nothing to consent to.

Like every web server, this one records a line for each request it serves. That line contains the visitor’s IP address, the date and time, the page requested, the HTTP status, the referring page when the browser sends one, and the browser’s user-agent string.

These logs exist for two reasons: keeping the server secure and working (diagnosing errors, blocking abuse), and letting the publisher know which articles are read. They are read by GoAccess, a program running on the same server, which produces an aggregated report; IP addresses are anonymised before the report is built, and the report is not public.

Logs are kept for three months and then deleted automatically. They are never shared, never sold, never combined with any other source, and never used to follow anyone across other sites — which would in any case be impossible, since nothing is written to your browser.

Legal basis: legitimate interest in the security and proper operation of the site, and in knowing its audience (Art. 6(1)(f) GDPR).

Comments are handled by Isso, a free comment server running on this same machine. If, and only if, you post a comment:

• the text of your comment, the name you choose to give, and a hash of your IP address are stored in a local database;
• an email address, if you provide one, is stored so that you can be notified of replies; it is optional and never displayed;
• your browser receives a short-lived cookie that lets you edit or delete your own comment for a few minutes afterwards, and may keep your chosen name in local storage so you do not have to retype it.

That cookie is strictly necessary to the service you have explicitly requested — posting a comment — and falls outside the consent requirement of Article 82 of the French Data Protection Act. Simply reading the site sets nothing.

Comments are moderated and kept as long as the article they belong to.

You may ask for access to, rectification of, or erasure of any data concerning you, and you may object to its processing, by writing to joseph@vidal-rosset.net. You also have the right to lodge a complaint with the CNIL (www.cnil.fr).

Given how little is collected, the practical case is usually the deletion of a comment, which is done on request without discussion.

Unless stated otherwise, the texts on this site are the work of their author. The source code published here is distributed under the licence stated in each repository.