Privacy

In short

The site counts its visits without storing anything on your device. With your consent, and only with it, it sets an audience-measurement cookie and records your visit on screen, to understand how the site is used and fix what doesn’t work. You can refuse in one click, and change your mind at any time from the “Cookies” link in the footer. Nothing is used for advertising, nothing is sold.

Data controller

Samuel Lerman, sole trader (Atelier SL), 197 rue Saint-Martin, 75003 Paris, France. Reachable at contact@samuellerman.com.

Hosting

The site is hosted in Paris by Scaleway. Its web server keeps no log of visits. To provide the service, Scaleway processes technical connection data, such as IP addresses; see Scaleway’s privacy policy.

Audience measurement and session recording

Measurement is done with PostHog, hosted on its European servers in Frankfurt (PostHog, Inc.). Requests go through the site itself before being passed on; no script is loaded from another domain.

Without your consent, the site counts the pages viewed, the clicks and the errors met, without storing or reading anything on your device. Each visit is counted from a hash computed by PostHog, renewed every day, from your IP address and your browser’s characteristics; the IP address itself is not kept. Two visits two days apart are therefore two visitors: nothing can follow you over time. Legal basis: my legitimate interest in knowing whether the site works and how it is read (GDPR, art. 6.1.f).

With your consent, a cookie is added, which recognizes your browser from one page and one visit to the next, and a recording of your visit on screen: the pages shown, your movements, your clicks and your scrolling, as well as the technical messages produced by your browser. What you type into a field is masked before it is sent. Legal basis: your consent (art. 6.1.a), which you can withdraw at any time, without having to justify yourself.

In both cases, each measurement carries your browser’s name and version, the device type, the screen size, the country, the page’s language and what chose it (your choice or your browser’s language), and the site’s errors if you meet any. When you arrive through a link in an email I sent you, it also carries that link’s code, which tells me which email brought you here; it is kept for the visit in your browser’s session storage, never shown.

These measurements only serve to improve the site and fix its faults: which pages and projects are read, where a visit stops, whether the booking button is found, whether a page renders badly on a device. No profiling, no advertising, no resale.

Language

Every address on the site is in one language, and a link opens in its own. Only the home page, at samuellerman.com, chooses for you: the language you chose, otherwise your browser’s, which it tells every site it visits; if it speaks neither French nor English, English. The site’s server makes that choice on each visit and keeps nothing of it.

If you change the language with the site’s switch, your choice is kept in a cookie (sl_lang), so the site opens in that language on your next visit. It is strictly necessary for the service you ask for and set without your consent, as the law allows; only the site’s server reads it, and it is passed on to no one else. It expires after one year, or sooner if you clear the site’s data in your browser.

Cookies

The consent cookie (sl_consent) remembers your answer to the cookie question, and its date, so it isn’t asked on every page. It is strictly necessary and set without your consent, as the law allows. It expires after six months.

Only if you accept them, PostHog’s cookies and local storage (ph_…) are added: a random identifier that recognizes your browser, the identifier of the current visit and your measurement preferences. They expire after one year. None of them is set before you click “Accept”; refusing takes the same click, in the same place, and has no consequence on your visit.

You can change your mind whenever you like: the “Cookies” link in the footer clears your answer and what PostHog had stored, and asks the question again. Otherwise it is asked again after six months, as the CNIL recommends.

Reporting a problem

The “Report a problem” link in the footer lets you write to me from the site. Your message and your email address are sent to PostHog’s support inbox, with the page’s address and your browser, and, if you accepted the cookies, the recording of your visit, so I can reproduce the problem. They only serve to answer you and fix the site. Without scripts, or if that inbox cannot be reached, your own mail app opens instead.

Booking a call

Booking a call happens on Google Calendar’s appointment page, on Google’s site; no Google script loads on this site. What you enter there (your name, your email address) is used to arrange the call, and Google processes it under its privacy policy.

Contact by email or phone

If you write to me or call me, your details and your message are used only to reply to you.

How long

Audience-measurement data is kept for one year, session recordings for thirty days, problem reports for as long as it takes to answer and fix the site. The consent cookie expires after six months, the language cookie and PostHog’s after one year.

Your rights

You can ask to access, correct or erase your data, or object to its processing, by writing to contact@samuellerman.com. Where processing rests on your consent, you can withdraw it at any time from the “Cookies” link in the footer; withdrawing doesn’t undo what was measured before. You can also complain to the CNIL, the French data protection authority.