Privacy policy
Last updated: 22 September 2026
This site collects the bare minimum: what you type into the contact form, and the server's technical logs. Here is what is done with that data, how long it is kept, and how to exercise your rights.
This is a summary for convenience. The French version is the only legally binding text; where the two differ, the French prevails.
Data controller
Bebop Tech — Benjamin Curabet, sole trader, SIRET 952 710 085 00012, Lyon, France. Contact: through the contact form.
Data collected and purposes
Contact form: name, email address, phone number (optional), type of need and project description. Purpose: answering your request and preparing a quote. Legal basis: steps taken at your request prior to entering into a contract (GDPR article 6(1)(b)).
Server logs: IP address, requested page, date and time, browser. Purpose: site security, abuse detection, troubleshooting. Legal basis: legal obligation to retain connection data under French law, and legitimate interest (article 6(1)(c) and (f)).
Anti-spam: the number of form submissions is limited per IP address. That information stays in the server's memory for fifteen minutes, then disappears.
Analytics
Site traffic is measured with Umami, open-source software hosted on Bebop Tech's own servers (stats.bebop-tech.com). It sets no cookie, does not store IP addresses and does not follow visitors across sites. It counts page views, country, device type and referring site, plus a form submission and the type of need selected, with nothing identifying. This setup meets the conditions under which the French regulator (CNIL) exempts audience measurement from consent.
Cookies
This site sets no cookies at all: no tracking, no analytics, no preferences. There is therefore no banner to accept.
Recipients and processors
Contact requests are read by Benjamin Curabet only. They are neither shared, sold nor passed on for marketing purposes.
Hosting: OVH SAS (OVHcloud), 2 rue Kellermann, 59100 Roubaix, France. Form submissions reach us through Bebop Tech's email service.
No data is transferred outside the European Union.
Retention periods
Contact requests: three years from the last exchange, then deleted. If a contract is signed, project-related exchanges are kept for its duration, then for as long as accounting and legal obligations require.
Server logs: twelve months at most.
Your rights
You may access your data, have it corrected or erased, restrict its processing, object to it and request its portability. Write to through the contact form: reply within one month. No proof of identity is required unless there is serious doubt about who is asking.
If you believe your rights are not respected, you may lodge a complaint with the French data protection authority, CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — cnil.fr.
Security
The site is served over HTTPS only, with strict security headers. Servers are located in France. Access to the data is restricted to the data controller.
Changes
This policy may change, for instance if a new tool is added to the site. The date at the top of the page shows the current version.
A question about this notice?
Any request concerning your data can be sent by email: through the contact form