Privacy policy
This is a courtesy translation. The controller is a French company and this policy is governed by French law and the GDPR. In the event of any discrepancy, the French version prevails.
This policy describes the processing of personal data carried out from the site datatropy.ai. It is deliberately short, because that processing is.
Controller
DATATROPY (SASU), Trade and Companies Register of Nanterre 939 679 015, registered office 92800 Puteaux, France.
For any question about this policy or about exercising your rights: contact@datatropy.ai.
The company is not required to appoint a data protection officer within the meaning of Article 37 of the GDPR, its activity falling under none of the situations that make it mandatory.
What we do not do
No user accounts. No sale or rental of data to third parties. No profiling, no automated decision-making. No advertising, no advertising trackers. No embedded social networks. No fonts or libraries called from a third-party server.
Cookies
This site sets no cookies — not technical, not analytical, not advertising. No consent banner is therefore required, and none is displayed.
Audience measurement is provided by Cloudflare Web Analytics, which uses neither cookies nor device fingerprinting, and does not track visitors from one site to another. The resulting data is aggregated and cannot identify you.
Processing no. 1 — Mailing list
Purpose
To inform you of the publication of forthcoming essays and forthcoming volumes in the collection.
Legal basis
Your consent, obtained through a checkbox that is not pre-ticked (Article 6(1)(a) of the GDPR).
Data collected
Your email address. The date and time of your consent, retained as evidence. Nothing else: no name, no job title, no organisation, no IP address.
Recipients
Your data is processed by the controller. It is recorded in a database hosted by Cloudflare, Inc., acting as a processor within the meaning of Article 28 of the GDPR, in a storage region located in the European Union. No email delivery provider is a recipient of this data to date. This paragraph will be completed if the sending of messages is entrusted to a third party.
Transfers outside the European Union
None, for this processing: the database is located in the European Union.
Retention period
Until you withdraw your consent. Failing withdrawal, your data is deleted after three years without any interaction on your part with the messages sent.
Withdrawal
Every message carries a one-click unsubscribe link. Withdrawal takes effect immediately and deletes the address.
Processing no. 2 — Technical logs
Purpose
To ensure the security and availability of the site, and to prevent abusive use.
Legal basis
The legitimate interest of the controller in protecting its infrastructure (Article 6(1)(f) of the GDPR).
Data
Connection logs generated automatically by the hosting infrastructure: IP address, timestamp, resource requested, browser type.
Recipient
Cloudflare, Inc., as a processor.
Transfers outside the European Union
This processing involves a transfer to the United States. It is framed by the standard contractual clauses adopted by the European Commission, supplemented by the technical and organisational measures of Cloudflare’s data protection addendum. Cloudflare, Inc. also adheres to the EU-U.S. Data Privacy Framework.
Retention period
These logs are retained by the host for a limited period, in accordance with its own policy, and are not used by the publisher beyond the security purpose.
Processing no. 3 — Correspondence
If you write to the contact address, your message and your email address are processed for the sole purpose of replying, on the basis of the legitimate interest in following up on an approach. Exchanges are retained for as long as necessary to handle your request, then archived or deleted.
Getting in touch by email does not enrol you in the mailing list.
Your rights
You have, in respect of data concerning you, a right of access, rectification, erasure, restriction of processing, objection, and portability. You may withdraw your consent at any time, without that withdrawal affecting the lawfulness of processing carried out beforehand.
You may also give directions as to what becomes of your data after your death.
These rights are exercised by a simple message to contact@datatropy.ai. A reply will be provided within one month. No proof of identity will be requested if the request comes from the email address concerned.
If, after contacting us, you consider that your rights are not being respected, you may lodge a complaint with the French data protection authority, the Commission nationale de l’informatique et des libertés (CNIL) — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — or online at cnil.fr.
Security
The site is served exclusively over HTTPS. Access to the mailing list data is restricted to the controller and protected by two-factor authentication.
Amendment
This policy may be amended to take account of changes to the site or to the applicable rules. The date of the last update appears below. In the event of a substantial change affecting the mailing list, the people registered are informed by message.
Last updated: 27 July 2026