Privacy Policy

01 Who I am

Awesome Factory is the software studio of Nicolas Perez ("I", "me", or "Awesome Factory"). I am the controller of the personal data described here. This Privacy Policy covers this website (the "Site") and the services offered through it, primarily the sale of professional engineering hours. For privacy questions, reach me through the contact form.

02 Information I collect

I keep data collection to the minimum needed to run the studio:

• Messages you send me. When you use the contact form, I receive your name, email address and message. They are stored in the Site's database on my server, along with the time you sent them, and emailed to my inbox. Your IP address is used briefly to limit how many messages can be sent in an hour; it is not stored with your message.
• Payment information. Purchases are processed by Stripe. Your card details go directly to Stripe and never touch this Site or my servers. I receive only transaction details such as the amount, date, your email address and a checkout reference.
• Usage data (only if you accept analytics cookies). To understand how the Site is used, I record your visits with my own first-party analytics: pages viewed and time spent on them, the referring site, campaign parameters and ad click identifiers from the link you arrived through, clicks on key buttons (such as "Book hours") and on links to other sites, your IP address and the approximate location derived from it (country, region, city), browser, device, operating system and language. This data stays on my own server and is not shared with advertisers. If you accept, Google Analytics also runs (see below).
• Server logs. Like any website, the server records basic technical information about each request (IP address, page requested, time, browser) to keep the Site running and secure.

I do not knowingly collect information from anyone under 16 years of age.

03 How I use it, and why I'm allowed to

• To reply to your messages and provide the services you buy. This is needed to take steps you ask for and to perform our contract.
• To process payments and send receipts (via Stripe), and to keep records required for accounting, tax and legal compliance. This is a legal obligation.
• To keep the Site secure and working, including blocking spam sent through the contact form. This is my legitimate interest in running a safe website.
• To measure how the Site is used (analytics). Only with your consent, which you can withdraw at any time.

I do not sell your personal information, and I do not use it for advertising.

04 Service providers

I rely on a small number of trusted processors to operate:

• Stripe: payment processing. See the Stripe Privacy Policy.
• Resend: delivers contact-form messages to my inbox. See the Resend Privacy Policy.
• Google Analytics: visit statistics, only if you accept analytics cookies. See the Google Privacy Policy.
• Google Fonts: serves the Site's typefaces. Your browser fetches them from Google, which receives your IP address. See the Google Fonts privacy FAQ.
• My web host: runs the server that stores the Site's database and logs.

These providers only access data as needed to perform their function and are bound by their own privacy obligations. Some of them (Stripe, Resend and Google) may process data outside the European Economic Area, under the safeguards their policies describe, such as the EU Standard Contractual Clauses.

05 Cookies

Analytics only run if you accept them in the cookie banner. Until you do, no usage data is recorded and no analytics cookie is set. If you accept, this Site sets af_vid, a first-party cookie holding a random identifier so that repeat visits from the same browser can be recognised (it lasts about 13 months), and loads Google Analytics, which sets its own _ga cookies. None of this is used for advertising.

Your choice is remembered for 6 months in a cookie named af_consent. You can change it at any time with the Cookie settings link at the bottom of every page; withdrawing removes the analytics cookies.

The contact and payment forms also set csrftoken, a security cookie that protects them from being submitted by other websites. It is strictly necessary and contains no personal information. When you pay, Stripe's payment form may set cookies that are strictly necessary to complete a secure checkout and prevent fraud.

06 Data retention

• Contact messages are kept while we're in touch and for as long as they're useful for an ongoing or past project, then deleted.
• Payment and invoicing records are kept for as long as accounting and tax law requires.
• Analytics data is kept on my server and is not deleted automatically. You can ask me to delete yours at any time.
• Cookies expire as described above, or when you clear them in your browser.

07 Your rights

Depending on where you live, you may have the right to access, correct, delete, or restrict the processing of your personal data, to object to certain uses, to receive a copy of your data, and to withdraw consent at any time. To exercise any of these, reach me through the contact form and I'll respond within one month. If you are in the EU, you can also complain to your data protection authority (in France, the CNIL).

08 Changes to this policy

I may update this policy from time to time. The "last updated" date above reflects the current version. Material changes will be posted on this page.

09 Contact

Questions about your privacy? Reach me any time through the contact form.