Privacy Policy

This policy explains what personal data this website processes, why, and your rights under the GDPR.

1. Who is responsible

Aviral Kapoor, 28 Rue Lantiez, 75017 Paris, France. Email: aviral.contact@gmail.com.

2. Hosting and server logs

This website and its sign-up form run on Vercel (Vercel Inc., USA). When you visit a page, Vercel processes technical data such as your IP address, the date and time, the page requested and your browser's user agent, to deliver the page and keep it secure (Art. 6(1)(f) GDPR). Vercel processes this data on our behalf under a data processing agreement and is certified under the EU-U.S. Data Privacy Framework.

3. No cookies, no analytics, no external fonts

This site sets no cookies, uses no analytics or tracking, and serves its fonts from its own server.

4. The free starter kit and our emails

When you download the free starter kit, you give us your email address and agree to receive occasional emails about new skills, articles and the store launch (one or two a month). The kit is free; these emails are what we ask in return. The download starts right away: we don't send you an email for it.

What we store: your email address; the date, time, IP address and browser (user agent) of your request; the wording and version of the consent you gave and the page you gave it on; and how often you downloaded the kit. We keep these details to be able to prove your consent (Art. 7(1) GDPR).

Legal basis: your consent (Art. 6(1)(a) GDPR) for the emails; our legitimate interest in proving that consent and in protecting the form from abuse (Art. 6(1)(f) GDPR). To limit abuse, we count requests per network for one hour using a keyed hash of the IP address, not the address itself.

Service providers (processors, each under a data processing agreement):

The data is stored in a MongoDB Atlas database run by MongoDB, Inc. (USA), hosted in AWS Frankfurt (eu-central-1). MongoDB is certified under the EU-U.S. Data Privacy Framework.
The form and the download run on Vercel (see "Hosting and server logs").

We don't use an email service yet. Before we send the first email, this policy will name the service that sends it.

How long: until you withdraw your consent. After that, we keep your address, your consent record and the date you withdrew it on a do-not-email list, to prove the consent and to make sure we don't email you again (Art. 6(1)(f) GDPR). Ask us and we'll delete that too.

Withdrawing your consent: email us at aviral.contact@gmail.com; every email we send will also have an unsubscribe link. Withdrawing doesn't affect the lawfulness of anything before it (Art. 7(3) GDPR).

5. Contact by email

If you email us, we use your message only to reply (Art. 6(1)(b) or (f) GDPR) and delete it when it's no longer needed.

6. External links

Links to LinkedIn, GitHub and other sites are plain links. No data is sent to those services until you click them.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), and the right to withdraw consent at any time (Art. 7(3) GDPR). You can also complain to a data protection supervisory authority (Art. 77 GDPR): the one responsible for us is the CNIL in France (cnil.fr), or use the authority where you live or work.