Privacy Policy

This document was last updated on September 18, 2025

At BleuRaven (accessible from BleuRaven.fr), protecting the privacy of our visitors is important to us. This Privacy Policy explains what information we collect, how we use it, and your rights in relation to that data.

Scope

This policy applies to personal data processed in connection with the BleuRaven website and services. It does not cover information collected offline or via other channels.

Information we collect

  • Contact information you provide: if you contact us by email (for example to ask a question or report an issue), we will store the information you voluntarily provide (such as your name, email address and the content of your message) solely to answer you and handle your request.
  • Server logs and hosting data: our hosting provider (OVH) may automatically record technical log information (IP address, request timestamps, user agent, referrer, etc.) for security, debugging and operational purposes.
  • Download counter identifiers: to measure downloads and to detect abuse (e.g. repeated automated downloads), we store a cryptographic hash derived from the visitor's IP address when a file is downloaded. We do not store the IP address in clear text. The stored value is used only to count unique downloads and to detect obvious misuse.

Why we collect this data

  • To respond to messages you send us and provide support.
  • To ensure the security and correct functioning of the website (e.g. detecting and stopping attacks or automated abuse).
  • To provide an accurate download count while minimising privacy impact (by storing a pseudonymised identifier rather than raw IP addresses).

Legal basis

Where required, our processing is based on our legitimate interests: maintaining site security and integrity, preventing abuse, and measuring the distribution of our content (download counts). We have considered and balanced those interests against individuals' privacy rights and implemented technical measures (pseudonymisation, limited retention) to reduce privacy risk.

Download counter — technical note

When a file is downloaded we compute and store a cryptographic hash derived from the visitor's IP address (for example a SHA-256 or HMAC value). This hashed identifier is stored only to:

  • detect and block automated or abusive downloads, and
  • count unique downloads.

We do not combine these hashed identifiers with other personal data to identify individuals. If the hash were to be reversible or combined with other data, it would be treated as personal data; therefore we treat these hashed identifiers as pseudonymised data and apply the safeguards described in this policy.

Data retention

Pseudonymised identifiers used for the download counter and server logs are retained only as long as necessary for the purposes described above and typically for no longer than 6 months, unless a longer period is required for legal or security reasons. Contact messages may be kept as long as needed to respond and for a reasonable period thereafter (for example to keep a support history), unless you request deletion.

Third parties and advertising

BleuRaven does not use third-party advertising networks, tracking or analytics tools on the site. Links to our own content or to third-party sites are for convenience and do not imply data sharing with advertising partners. We do not sell personal data.

Your rights

If you are located in the European Economic Area (EEA), you have certain rights under data protection law, including the right to access, correct, delete or restrict processing of your personal data, and the right to data portability in certain cases. If data is irreversibly anonymised, those rights do not apply to the anonymised data. To exercise your rights, or if you have questions about how we process your data, contact us at the address below. We will respond to requests in accordance with applicable law (generally within one month).

Security

We take reasonable technical and organisational measures to protect data against unauthorised access, disclosure, alteration or destruction. Access to pseudonymised identifiers and logs is strictly limited to authorised personnel and protected by appropriate security controls. The secret keys or server-side secrets used for hashing must be stored securely (for example in environment variables or a key vault) and are not exposed in public source code.

Children

We do not knowingly collect personal information from children under the age of 13. If you believe we have collected such information, please contact us and we will take steps to remove it.

Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page will reflect changes. Continued use of the site after changes indicates your acceptance of the updated policy.

Contact

If you have questions, or wish to exercise your rights, please contact: xavierloux.loux@gmail.com

Hosting provider: OVH