Privacy

Controller

Ny Hasinavalona Randriantsarafara is the data controller for this site. Questions about this notice: nyhasinavalonar@gmail.com.

What is collected and why

Anonymous audience statistics (page views, navigation within the site, device class and marketing tags when present) support a single purpose: understanding how the portfolio is used. The design follows the CNIL exemption for audience measurement: no cookies, no cross-site tracking, daily-rotating salt for visitor counts, no storage of IP addresses.

Chat questions are stored without identifying the visitor, to improve answers and spot gaps in the answer bank.

Contact form messages (name, email, optional company and message) are stored so the owner can reply.

Theme preference (light or dark) is saved in local storage on your device because you explicitly choose it; it is not used for tracking.

What is never collected

IP addresses are not stored. No advertising or cross-site trackers run on this site. No analytics cookies are set.

Retention

Raw audience events and chat exchange rows are deleted thirteen months after they are recorded. Daily aggregate statistics are kept without limit (they contain no personal data). Contact messages are deleted three years after they were last updated. Search Console import rows are kept without limit; they contain no personal data.

Processors

Google sends email notifications when a contact message arrives (SMTP).

OVHcloud hosts the VPS running the API and Directus.

GitHub hosts the static site.

Cloudflare stores encrypted backups of production data.

Your choices and rights

Global Privacy Control and Do Not Track are honoured: when your browser sends those signals, audience events are not recorded.

Under the GDPR you may request access, rectification or erasure where applicable, or object to processing. Contact the controller at the address above.