Privacy policy

This site is a portfolio. It collects the bare minimum of personal data, only for the features described below.

Data controller

Aris Meksaoui — contact: the contact form of this site

Data, purposes and legal bases

• Contact form: name, email address, subject (optional) and message. Purpose: reply to your request. Legal basis: legitimate interest in answering professional enquiries (art. 6(1)(f) GDPR) and, where relevant, pre-contractual steps at your request (art. 6(1)(b)). The message is sent by email and is not stored in the site’s database.
• “Like” on projects: when you click “Like”, a random identifier is created in your browser’s local storage (no cookie). The server only keeps an encrypted fingerprint (HMAC) of it, linked to the project, to avoid duplicates. It does not directly identify a person. Legal basis: legitimate interest (art. 6(1)(f)). You can withdraw your like at any time, which deletes the fingerprint; you can also clear your browser’s local storage.
• Display preferences: if you choose a light or dark theme, that choice is remembered in your browser’s local storage. It is never sent to the server.
• Abuse protection: your IP address is used in memory, as an irreversible fingerprint, to limit the number of submissions and actions, then erased automatically (at most two hours after your last request). Legal basis: legitimate interest (art. 6(1)(f)).
• Technical logs: date, requested path, response code and duration, with a request identifier. They contain neither message contents nor the email address you entered. They are kept in the container logs with size-based rotation (30 MB maximum), so for a duration that depends on traffic.

Cookies, statistics and external resources

Visitors receive no cookie. Fonts and icons are hosted on this site: no request is sent to a third-party font service. A session cookie exists only for the site owner’s back-office and is never sent to visitors.

No audience-measurement tool is active on this site.

Recipients and processors

Host: OVH SAS. Email delivery provider: OVH SAS. No data is sold or used for marketing.

Transfers outside the European Union

None: the host and the email provider (OVH SAS) process the data within the European Union.

Retention

Contact messages: 12 months at most after the last interaction, then deleted from the owner’s mailbox. Like fingerprints: until the like is withdrawn. IP fingerprints: at most two hours.

Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability. To exercise them: the contact form of this site. Reply within one month. You may also lodge a complaint with the French data protection authority (CNIL): cnil.fr.

Security

Messages are validated on the server, public actions are rate-limited, and no service credential is exposed in the browser. Traffic is encrypted over HTTPS when the site is served behind a TLS proxy.