Privacy policy
Last updated: 2026-07-12
Introduction
This privacy policy explains how Antoine Candy ("we", "us") processes personal data when you visit acandy.me (https://acandy.me(opens in new tab)).
We process data in accordance with the General Data Protection Regulation (GDPR) and applicable French law.
Data controller
- Controller: Antoine Candy
- Contact: antoine.candy@gmail.com
Data we collect
Contact form (when you send a message):
- Name
- Email address
- Message content
- Anti-spam verification data (Cloudflare Turnstile)
Analytics (PostHog, if enabled):
- Pages viewed and navigation paths
- Clicks on site elements (custom events only, no autocapture)
- Technical data: browser, device type, approximate location, referrer
- A pseudonymous visitor identifier (cookie and/or local storage)
Server logs (hosting):
- IP address, date and time of access, pages requested (standard web server logs)
Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Reply to your contact request | Performance of pre-contractual measures / legitimate interest |
| Site security (anti-spam) | Legitimate interest |
| Audience measurement and site improvement | Legitimate interest (analytics) |
| Hosting and technical operation | Legitimate interest |
Processors and transfers
We use the following service providers:
- Vercel (hosting, USA): infrastructure and delivery
- Resend (email): delivery of contact form messages
- PostHog (analytics, EU): eu.posthog.com(opens in new tab), data hosted in the EU; requests proxied via
https://acandy.me/ph - Cloudflare Turnstile (anti-spam): verification on the contact form only
Some providers may process data outside the EU with appropriate safeguards (standard contractual clauses where applicable).
Retention
- Contact messages: kept for the time needed to handle your request, then deleted or archived within 24 months unless a longer period is required by law.
- Analytics data: retained according to PostHog project settings (typically up to 12 months for event data).
- Server logs: retained by the host for a limited period (usually a few weeks).
Your rights
Under the GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict or object to processing
- Data portability (where applicable)
- Withdraw consent at any time (where processing is based on consent)
- Lodge a complaint with the CNIL (cnil.fr(opens in new tab))
To exercise your rights, contact antoine.candy@gmail.com.
Cookies
This site uses cookies and similar technologies. See our cookie policy for details.