Privacy Policy
This is the privacy policy for a personal portfolio website, not a legal document drafted by counsel. It aims to describe plainly and accurately what this site does with your data — nothing more.
Who is responsible for your data
This site, matteopaffetti.com, is the personal portfolio of Matteo Paffetti, based in Paris, France. Matteo is the data controller for any personal data collected through this site.
What data is collected
The only personal data this site collects is what you choose to submit through the contact form: your name, email address, and the message you write. Nothing is collected if you don't use the form.
This site sets no cookies, which is why there is no cookie
consent banner. Two small values are written to your browser's own storage, both
purely so the site behaves the way you left it: mp01-boot in
sessionStorage, so the opening animation plays only once per tab and is discarded
when you close it, and mp01-theme in localStorage, which remembers
whether you chose the light or dark theme. Neither contains personal data, neither
is sent anywhere, and clearing site data removes both.
Visitor statistics
Aggregate visitor statistics are collected using Vercel Web Analytics: page views, the referring site, approximate country, browser and device type. It is cookieless and stores no identifier in your browser — Vercel derives an anonymous hash from the incoming request instead, which cannot be used to follow you across other websites. No advertising profile is built, and the data is never sold or shared.
The lawful basis is legitimate interest: knowing whether the site is being read, and from where, without identifying anyone. If you would rather not be counted, any standard tracker-blocking extension will block it.
Why it's collected, and on what basis
Contact-form data is used solely to respond to your enquiry. The lawful basis is your consent, given by voluntarily filling in and submitting the form, and Matteo's legitimate interest in being able to reply to messages sent to him.
Who else processes it
Two third-party processors are involved in running this site:
- Web3Forms — the service that delivers contact-form submissions to Matteo's inbox. Web3Forms processes the name, email and message you submit in order to forward it by email.
- Vercel — the hosting provider for this site, and the provider of the visitor statistics described above. Like any hosting provider, Vercel processes standard server/access logs (which can include IP addresses) as part of delivering and securing the site. This happens for every visitor, not just those who use the contact form.
This site also links out to LinkedIn and to a live demo application (a subscription-tracker app hosted separately), and offers a CV file for download. Visiting those destinations is subject to their own, separate privacy policies — this policy covers only matteopaffetti.com.
How long it's kept
Contact-form submissions are kept only for as long as needed to handle the correspondence, then deleted.
Your rights
Under the GDPR, you have the right to:
- Access the personal data held about you
- Have inaccurate data corrected (rectification)
- Request deletion of your data (erasure)
- Restrict how your data is processed
- Object to processing
- Receive your data in a portable format (portability)
- Lodge a complaint with the CNIL, the French data protection supervisory authority
How to exercise your rights
Since this site deliberately doesn't publish an email address, the quickest way to reach Matteo about any of the above is through the contact form on the homepage, or via LinkedIn.