Privacy policy

Valentin BENEZET (AVRYN), sole trader, 2 rue de Lavernhe, 12210 Laguiole, France, SIRET 10767397200017. For any question about your data: hello@avryn.studio or 07 44 95 37 60.

• No advertising trackers, no social buttons, no third-party analytics.
• No selling, renting or exchanging your data, in any form.
• No profiling, no automated decision-making about you.
• No consent banner, because there is nothing to consent to: the only cookie we set is required to keep you logged in.

When you write to us from the site, we record:

• your name and email address, so we can reply;
• your company, if you fill it in, the field is optional;
• the subject you picked and your message;
• the site language at the time, so we answer in it;
• your browser (the user-agent header), which helps tell a real enquiry from a bot;
• the date we received it.

Legal basis: your own request: pre-contractual steps taken at your initiative, and our legitimate interest in answering people who contact us.

Retention: three years from our last exchange, unless it led to a contract, in which case accounting obligations apply.

Your IP address is not stored. It is held in memory for at most one hour, solely to limit how many messages can be sent from one origin, then forgotten.

If you are a client with an account, we keep your email address, name, display initials and role, along with the records of your projects, hosting, invoices and messages with us.

Your password is never stored. Only a scrypt hash is: a function designed to be slow, and therefore expensive to attack. We cannot read it, and it cannot be recovered from our database.

Legal basis: performance of our contract. Retention: the length of the relationship, then five years, except accounting records kept ten years as the law requires.

Three items only, all required to make the site work. None of them tracks you.

• avryn_session : the client area login cookie. Set only after you sign in, unreadable by page JavaScript (HttpOnly), restricted to this site (SameSite=Lax), encrypted in production, valid thirty days. Signing out clears it.
• avryn.locale : remembers the language you chose, in your browser. It is never sent to us.
• avryn.intro : remembers, for this visit only, that the opening animation has already played. Cleared when you close the tab.

The last two are not cookies but local storage: they never leave your device.

Us, and no one else beyond the providers strictly needed to run the service:

• The host: OVH SAS, 2 rue Kellermann, 59100 Roubaix, France. It hosts the site, the database and the files, on servers located within the European Union.
• Email delivery: no provider to date. Form messages are stored in the database and read from the admin area. If a delivery service is introduced, this page will name it before it goes live.

These providers act only on our instructions and have no right to use your data for themselves. No transfer outside the European Union takes place.

You may ask to access your data, have it corrected or erased, restrict or object to its processing, or receive a portable copy.

Write to hello@avryn.studio or to the postal address above. We answer within one month.

If our answer does not satisfy you, you may complain to the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, ou par le site cnil.fr.