DevByBen

Privacy Policy

GDPR Compliant

This policy transparently describes how devbyben.fr processes personal data, which third-party services are active, your rights under the GDPR, and how to exercise them.

Data Controller
DevByBen (Benoît Petit)
Jurisdiction
France / EU — GDPR
Last Updated
March 5, 2026

Detailed Policy

1. Data Controller

The data controller within the meaning of the GDPR (Regulation EU 2016/679) is:

  • Name: Benoît Petit (DevByBen)
  • Status: Individual — independent developer
  • Country: France
  • Contact: contact@devbyben.fr or via email

2. Data Collected and Purposes

2.1 — Google Analytics 4 (GA4)

This site uses Google Analytics 4 (Google LLC, USA) to measure audience and site performance. GA4 collects, via cookies and JavaScript beacons, the following data:

  • Truncated IP address (last octet removed by Google before storage)
  • Pages visited, referrer URL, session duration
  • Browser type, operating system, device category
  • Core Web Vitals metrics (LCP, CLS, INP, TTFB, FCP)
  • Approximate geographic location (country / region level)

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) for audience measurement purposes. You can opt out at any time using the Google Analytics opt-out browser add-on or by enabling the Do Not Track signal in your browser.

Data transfer: Data is transferred to Google LLC servers in the United States under the EU–US Data Privacy Framework (adequacy decision of 10 July 2023).

Retention: 14 months (Google Analytics default). See Google Privacy Policy.

2.2 — Vercel Analytics & Speed Insights

Vercel Analytics and Speed Insights collect anonymised performance metrics:

  • Core Web Vitals (LCP, CLS, INP, TTFB, FCP)
  • Page path and referrer (without any personal identifier)
  • Hashed device fingerprint — no cookies are set

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR). No persistent cookies are used by Vercel Analytics. See Vercel Privacy Policy.

2.3 — GitHub API

Public GitHub data (repositories, gists, user profile) is fetched via the GitHub REST API to populate the portfolio. Only public data is accessed — no GitHub user data from visitors is collected. See GitHub Privacy Statement.

2.4 — Baserow

Baserow (Baserow BV, Netherlands, EU) is used as a backend database for the open-source dev tools catalog. No visitor personal data is stored in Baserow — it contains only tool metadata managed by the site owner. See Baserow Privacy Policy.

3. Cookies

The following cookies may be set by this site or its integrated services:

CookieProviderPurposeRetention
_gaGoogle AnalyticsDistinguishes users2 years
_ga_*Google AnalyticsPersists session state2 years
_gidGoogle AnalyticsDistinguishes users24 hours

You can refuse or delete these cookies at any time via your browser settings. Refusing analytics cookies does not affect your ability to use this site.

4. Hosting & Infrastructure

This site is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). Vercel processes server access logs (IP address, request path, timestamp) for operational and security purposes. These logs are retained for a limited period and are not used for tracking. Data transfers to the US are covered by Vercel's adherence to the EU–US Data Privacy Framework. See Vercel DPA.

5. International Data Transfers

Some data is transferred outside the European Economic Area (EEA):

Google (GA4) — USAEU–US Data Privacy Framework (adequacy decision July 2023)
Vercel — USAEU–US Data Privacy Framework + Standard Contractual Clauses
Tally — Belgium (EU)Intra-EU — no transfer outside EEA
Baserow — Netherlands (EU)Intra-EU — no transfer outside EEA

6. Your Rights (GDPR)

Under the GDPR (Articles 15–22), you have the following rights regarding your personal data:

Right of accessObtain a copy of your data (Art. 15)
Right to rectificationCorrect inaccurate data (Art. 16)
Right to erasure"Right to be forgotten" (Art. 17)
Right to restrictionLimit processing of your data (Art. 18)
Right to portabilityReceive your data in a structured format (Art. 20)
Right to objectObject to processing based on legitimate interest (Art. 21)

To exercise any of these rights, contact: contact@devbyben.fr. A response will be provided within 30 days as required by law.

If you believe your data is not being processed in accordance with applicable law, you have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés, France) or any other competent supervisory authority in your EU member state.

7. No Sale or Sharing of Personal Data

Personal data collected through this site is never sold, rented, or shared with any third party for commercial or marketing purposes. Data shared with the sub-processors listed above (Google, Vercel, Tally, Baserow) is strictly limited to the service purpose and governed by their respective data processing agreements.

8. Contact for Privacy Inquiries

For any question about this policy or to exercise your rights, contact the data controller at:

contact@devbyben.frcontact@devbyben.fr
Last Updated: March 5, 2026
Privacy v2.0.0