Last updated
Privacy and cookies
This site collects as little as it can. This page lists everything that is processed, why, for how long and by whom.
Who is responsible
This is a personal, non-commercial project. The data controller is:
Valentin Lemaire · lemaire.valentin@hotmail.com
What is processed
- Every visit: the server counts page views anonymously (page, language, referring website, device type: mobile, tablet or desktop). No IP address, cookie or identifier is kept with them.
- Hosting: the site runs on Google Cloud in Belgium (europe-west1). Google's request logs contain your IP address and browser and are kept for 30 days, for security and troubleshooting.
- Questions to the assistant: your question and the answer are sent to Google Vertex AI in the Netherlands (europe-west4) to generate the answer; Google does not use them to train its models. They are also recorded in Pydantic Logfire (EU region) to find errors and improve answers, and deleted after 30 days. Do not enter personal information.
- Abuse protection: to limit the number of questions per visitor, the server keeps a keyed hash of your IP address, in memory only, and sets the bb_sid cookie. The hash is deleted about a day after your last question.
- Only if you accept analytics: PostHog (EU cloud, Frankfurt) records the pages you view, your clicks, your device and browser, an approximate location, and session replays. Text you type is masked and your questions are hidden from replays. Events are kept for 1 year, replays for 30 days.
Cookies and local storage
| Name | Purpose | Duration | Type |
|---|---|---|---|
| bb_sid | Limits the number of questions per visitor (cookie, set only when you use the assistant). | 30 days | Strictly necessary |
| bb_consent | Remembers your analytics choice (local storage). | 6 months | Strictly necessary |
| ph_*_posthog | Recognises your browser across visits for analytics (cookie and local storage). | 1 year | Analytics, with your consent |
Strictly necessary items need no consent. Analytics is off until you accept, and you can withdraw at any time; withdrawing deletes the PostHog cookie and storage from your browser.
Legal basis
Running and protecting the site, anonymous page counts and error tracking rely on legitimate interest (GDPR art. 6(1)(f)). Analytics relies on your consent (art. 6(1)(a)).
Who processes the data
Google Cloud (hosting, Vertex AI), Pydantic (Logfire) and PostHog act as processors under data processing agreements. All data is stored in the EU.
Your rights
You can ask for access to, correction or deletion of your data, object to its processing, or withdraw your consent, by writing to the address above. Most data here cannot be linked to you, so we may not be able to find it. You can also complain to the Belgian Data Protection Authority: Data Protection Authority.