Privacy policy

The controller of the data collected on this website is Montasir Osman, reachable at contact@montasirosman.dev.

This website collects the strict minimum of data required for it to work. No data is sold, rented or used for advertising purposes, and no profiling is carried out.

When you use the contact form, the following data is collected: name, email address and message content.

Purpose: responding to your request. Legal basis: your consent (article 6.1.a of the GDPR), expressed by voluntarily submitting the form.

This data is transmitted by email through the provider Resend, Inc. (United States) and is not stored in the website's database.

Retention period: exchanges are deleted no later than 12 months after the request is closed.

When the contact form is submitted, your IP address is processed temporarily to limit the number of submissions (3 per hour) and prevent abuse (spam, attacks).

Legal basis: the publisher's legitimate interest (article 6.1.f of the GDPR). The IP address is kept by the Upstash service (Redis) for the duration of the rate-limiting window, about one hour, then deleted automatically.

This website uses no advertising cookies, no third-party trackers and no audience measurement.

A single technical element is used: a language cookie (NEXT_LOCALE) remembering your language preference.

This strictly functional element is exempt from consent under the CNIL guidelines, which is why no cookie banner is displayed.

The following processors are involved in running the website: Vercel Inc. (application hosting), Cloudflare, Inc. (media file delivery via R2), Upstash, Inc. (contact form rate limiting) and Resend, Inc. (contact form email delivery).

These providers are located in or operate infrastructure in the United States. The corresponding data transfers are covered by appropriate safeguards within the meaning of the GDPR: the European Commission's standard contractual clauses and, where applicable, certification under the EU-US Data Privacy Framework.

In accordance with the GDPR and the French Data Protection Act, you have the right to access, rectify, erase, restrict, port and object to the processing of your personal data.

To exercise these rights, write to contact@montasirosman.dev. You will receive a response within one month.

If you believe your rights are not being respected, you can lodge a complaint with the CNIL (the French data protection authority): www.cnil.fr.