Privacy.
What we collect, why, where it is hosted, how long we keep it, and how to take control whenever you want.
- Controller
- Amorce, sole trader business of Christopher Chevreuil, SIRET 105 815 542 00011. One address for any question about your data: contact@amorce.dev.
- What we collect
- What you write in our forms, what you upload to your space, and a measure of site traffic, which you can refuse.
- What we do not do
- We do not sell your data. We show no advertising. We do not follow you from site to site.
- Hosting
- With Hetzner, in Falkenstein, Germany. Email goes through Google Workspace.
- Your rights
- Access, correction, erasure, objection, portability, restriction. We answer within 30 days.
Each row says what we do with your data, why the law allows it, who receives it and how long we keep it.
| Use | Data | Why | Who receives it | How long |
|---|---|---|---|---|
| Your preview request | Form on the home page, the Contact page and the questionnaire: your business, your email, your website or Instagram account, your budget. In the questionnaire: your answers, your logo, your photos, your contact details. When you send it, the server also notes your IP address and your browser, kept 30 days at most to spot abusive submissions. | Prepare your preview, send it to you, reply to you and prepare a quote. Steps taken at your request before a contract (article 6.1.b GDPR). | Amorce. Hetzner for hosting. Google Workspace for emails. | 3 years after the last contact, if you do not become a client. |
| Your client space | Your name, your email, your password (kept as a hash, never in clear), your requests, your messages, your files, your sign in dates and the type of device (for example Chrome on Mac). If you review your mockup in the space: the remarks and questions you and your team leave there, the replies, page approvals with the name of the person, the name and role of the team members you invite, and the news shown in the space. | Follow your project, exchange, review and approve your mockup with your team, be told by a short email when there is news, find your documents (performance of the contract, article 6.1.b). Protect access to your account (legitimate interest, article 6.1.f). | Amorce. Hetzner. Telegram, to tell Christopher a request has arrived, without the text of the request. Google Workspace for the short news email, which only contains a link to the space. The space assistant, see below. | As long as you are a client, then 3 years after we stop working together. Quotes and invoices: 10 years, an accounting obligation. Account never activated: 90 days. |
| Your business referrer space | Your name, your email, your password (hash), your prospects, your calls, your reminders, your commissions, your sign in dates and the type of device. | Follow your activity as a referrer and compute your commissions (performance of the contract, article 6.1.b). Protect access to your account (legitimate interest, article 6.1.f). | Amorce. Hetzner. | As long as the referral contract lasts, then 3 years. Accounting documents: 10 years. |
| Professionals we contact | Name, job title, company, professional email and phone number, found in public sources (the company website, directories, registers). | Offer our services to professionals whose activity fits them (legitimate interest, article 6.1.f). You can object at any time. | Amorce, its business referrers bound by contract. | 3 years after the last contact. If you object, your name stays on an objection list so that you are never contacted again. |
| Who looked at your file | The date of each time Amorce opens your file. | Be able to tell you who looked at your data, and explain it (transparency, legitimate interest, article 6.1.f). | You and Amorce. | 12 months. |
| Audience measurement | The page viewed, the name of the site you came from (its domain name only), the page title, the language, the screen size (rounded to the nearest hundred pixels). The server infers browser, system, country, region and city from your IP address, which it does not keep. To avoid counting the same visit twice, it computes a code from your IP address and your browser, mixed with a secret that changes every month: this code cannot recognise you from one month to the next, or from one site to another. | Know which pages are useful, to improve the site (a measurement the CNIL exempts from consent, under conditions). You can refuse it at any time in Cookies. | Amorce only. The tool, umami, runs on our server in Falkenstein: no third party receives this data. | 25 months at most. |
| Technical logs | The space log records the date, the requested action and the result, without your IP address. The server keeps the IP address of connection errors and intrusion attempts. The site itself does not keep a list of pages viewed. | Security, abuse detection, troubleshooting (legitimate interest, article 6.1.f). | Amorce. Hetzner. | 6 months at most. |
| Your rights requests | Your request, a document to check it comes from you, our answer. | Answer your requests (legal obligation, articles 12 to 22 GDPR). | Amorce. | 3 years after the answer. |
- Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Hosts the site, the space, your files and the backups, in its Falkenstein data centre in Germany. Your data stays in the European Union.
- Google Workspace (Google). Business mail contact@amorce.dev: the emails you send us and the ones we send you, including the acknowledgement of your request. Depending on Google's settings, these emails may pass through the United States, under Google's standard contractual clauses.
- Telegram. Tells Christopher that a request has arrived in the space: the company name and the request number, never what you wrote. Telegram is outside the European Union; according to its policy, data of European users is stored in the Netherlands.
- geo.api.gouv.fr, a French State service. In the questionnaire, when you type a postal code, the site asks this service for the town. The request contains only the postal code, and the service receives your IP address like any website.
- The space assistant, only if you accepted it. It receives your question, the summary of your account, the sheet of your site and the photos attached to the question. It is provided by MiniMax (Singapore, servers in the United States), whose policy does not promise never to use it to improve its services: this is why we ask for your written consent before switching it on for you, and we note its date. You can withdraw it at any time by writing to contact@amorce.dev. For a general question, DuckDuckGo and Jina receive only the search or the address of the page to read.
- No other recipient. We do not sell your data and we do not rent it out.
The only possible transfers outside the European Union are those of Google (standard contractual clauses), Telegram (an alert with no content) and the assistant.
The site sets no cookie. It stores in your browser your cookie choice, your light or dark theme when you change it, and the seed of the graphic background when you click Regenerate. Audience measurement does not need consent, under conditions we meet, and you can refuse it at any time. In the signed in space, a single cookie, which is necessary, keeps you signed in. The detail, the durations and the setting are on the Cookies page.
We find your professional contact details in public sources (your company website, a directory, a register). We use them for one thing only: to offer you our services. Between professionals, the law allows this when the offer relates to your activity and you can easily refuse.
To refuse, a word to the person who contacted you is enough, or an email to contact@amorce.dev. We stop at once, and we keep your name on an objection list so we never contact you again.
You can access your data, correct it, erase it, object to a use, receive it in a readable format (portability) or ask to restrict a use. Write to contact@amorce.dev. We answer within 30 days. We may ask for a document to check that the request comes from you.
When you ask for erasure, we keep only what the law requires us to keep: quotes and invoices, 10 years, archived and used for this obligation alone. If you think your rights are not respected, you can complain to the CNIL: cnil.fr/fr/plaintes. No automated decision with legal effects is taken about you.
- Encrypted connection (HTTPS) across the whole site.
- Passwords of at least 12 characters, kept as a hash, never in clear.
- Sessions close by themselves after 90 days without a visit.
- Daily backups of the space, kept 30 days.
- Each time Amorce opens your file it is logged.
- If a data breach concerns you, we tell you, and we tell the CNIL within 72 hours when the law requires it.
Last updated: 1 October 2026