Skip to content

Privacy Policy

Last updated:

This Privacy Policy explains how personal data is handled when you visit this website, read the blog, use the local search, or contact me.

This website is a personal portfolio and technical blog operated by Stephane Lanfranchi. It does not sell products, run user accounts, accept payments, publish comments, or use advertising profiles.

Data Controller

The data controller for this website is:

Website Purpose

The purpose of this website is to present my professional profile, portfolio case studies, and technical writing about iOS engineering, architecture, performance, privacy, StoreKit, WebKit, and related production software topics.

The blog posts are based on my professional experience and are written for informational and portfolio purposes. They do not intentionally publish confidential employer, client, user, or proprietary information.

Personal Data Processed

Depending on how you use the website, the following data may be processed:

  • Technical request data, such as IP address, requested URL, date and time, user agent, referrer, and security events, mainly through the hosting and security provider.
  • Local preference data, such as the theme preference stored in your browser’s localStorage.
  • Search activity inside the website search UI. The search index is generated for the static website and runs locally in the browser; the website does not intentionally send your search query to a server.
  • Contact data if you email me, such as your email address, name if included, message content, timestamps, and any information you choose to provide.
  • External-service data if you choose to follow links to LinkedIn, GitHub, Proton Mail, Cloudflare, or other third-party websites. Those services process data under their own policies.

Personal data is processed for the following purposes:

  • Operating, delivering, and securing the website. Legal basis: legitimate interest in maintaining a secure and functional personal website.
  • Preventing abuse, debugging technical issues, and maintaining availability. Legal basis: legitimate interest and, where applicable, legal obligation.
  • Remembering your display preference locally in your browser. Legal basis: legitimate interest in providing a usable website experience.
  • Responding to messages you send by email. Legal basis: consent through your voluntary message and legitimate interest in replying.
  • Preserving necessary records related to legal claims or compliance. Legal basis: legal obligation or legitimate interest.

Cookies and Local Storage

This website does not intentionally use advertising cookies, behavioral tracking cookies, or cross-site profiling cookies.

The site stores a theme preference in your browser’s localStorage so the light/dark mode can be remembered. This value stays on your device until you clear it in your browser.

If the website is served through Cloudflare, Cloudflare may use strictly necessary security or performance technologies as part of hosting, CDN, abuse prevention, and traffic protection.

If a newsletter, contact form, or bot-protection feature such as Cloudflare Turnstile is reintroduced later, this Privacy Policy should be updated before that feature is made public.

Hosting and Processors

The website is intended to be hosted through Cloudflare Pages and related Cloudflare services.

Cloudflare, Inc. may process technical request data and security data to provide hosting, CDN, DDoS protection, and other infrastructure services. Cloudflare’s public contact information and privacy policy are available at cloudflare.com/privacypolicy.

Email messages sent to me are handled through Proton Mail. If you contact me by email, Proton may process the message metadata and content according to its own service terms and privacy documentation.

International Transfers

Some service providers may process data outside the European Economic Area, including in the United States or Switzerland. Where required, such transfers should rely on an adequacy decision or appropriate safeguards used by the relevant provider.

Retention

Data is kept only as long as reasonably necessary for the purpose for which it was processed:

  • Local theme preference remains in your browser until you clear it.
  • Hosting, CDN, and security logs are retained according to the hosting provider’s applicable policies and configuration.
  • Email messages are retained for as long as needed to handle the conversation, maintain professional records, or comply with legal obligations. You can request deletion, subject to legitimate retention needs.

Your EEA/GDPR Rights

If you are in the European Economic Area, you may have the right to:

  • access personal data about you;
  • request correction of inaccurate data;
  • request deletion of data;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • request data portability where applicable;
  • withdraw consent where processing is based on consent;
  • lodge a complaint with a supervisory authority.

For France, the supervisory authority is the CNIL: cnil.fr/fr/plaintes.

To exercise your rights, contact me at stephane.portfolio@pm.me. I may need to verify your identity before responding.

Security

The site is static and uses security headers, a restrictive Content Security Policy, and hosting-level protection where available. No internet service can be guaranteed to be completely secure, but reasonable technical measures are used to reduce risk.

Children

This website is not directed at children and does not knowingly collect personal data from children.

Changes

This Privacy Policy may be updated when the website, hosting, analytics, contact methods, or legal requirements change. The latest update date appears at the top of this page.