When you browse the site
To send you a page or answer an API call, our servers, hosted by Scaleway in the European Union, receive your IP address, passed on to them by Cloudflare (see below). They do not write it to any log. Our technical logs only contain the requested address, the response status and the processing time, and nothing that identifies you. Before reaching our servers, every request goes through Cloudflare (Cloudflare, Inc., United States), which protects the site against attacks and bots. Cloudflare is the one that sets up the encrypted connection with your browser, so it sees everything exchanged between your browser and our servers, including your IP address, the headers your browser sends and the full address of the pages and API calls requested. It processes them as a processor, on our behalf and under its data processing agreement. It keeps them for as long as that service requires, and no later than the end of our contract with it. The legal basis is our legitimate interest in protecting the site and keeping it available (GDPR, article 6(1)(f)). This data may be transferred outside the European Union, in particular to the United States. Transfers to the United States are covered by the EU–US Data Privacy Framework, the subject of a European Commission adequacy decision of 10 July 2023; transfers to other countries by the European Commission's standard contractual clauses, provided for in Cloudflare's data processing agreement. There is no account system, no tracking pixel, and no third-party analytics.