Privacy Policy

Last updated: July 30, 2026.

This site wants you to know exactly what is collected, why, where your data lives and how you keep control of it. Nothing is sold, nothing is shared for advertising. Every technical choice follows one principle, data minimisation: only what is necessary is collected.

1. Data Controller

The data controller is DREMML, a French SAS with share capital of 1,000 euros, registered with the RCS of Vannes under number 912 636 610 (SIRET 912 636 610 00012), registered office at 12 Rue du Pont à Tan, 56230 Questembert, France, represented by Philippe Anel.

The site is published under the brand "Philippe Anel: La tête dans le code".

For any question about your data: rgpd@philippe-anel.fr.

2. Data Collected

Newsletter subscription

When you subscribe, we collect your email address and, if you provide it, your first name. Subscription uses email confirmation (double opt-in): you receive a message with a link, and you are added to the list only if you confirm. This guarantees nobody can subscribe you in your place.

Traffic analytics

The server keeps aggregated statistics (page views, daily visitor counts) that contain no personal data: they are anonymous counters. The anonymous consent tally (how many people accept or refuse advertising tracking) is part of these statistics: it holds no identifier and no IP address, and never reveals who made which choice. For security and abuse prevention, the server temporarily keeps the IP address and User-Agent of requests in its access logs, for at most 30 days, after which they are deleted automatically.

Account and member area

A free account will arrive in a later step. This policy will be extended then to describe account data (email, hashed password). No account data is collected until that feature is live.

3. Legal Basis

• Newsletter: your consent (Art. 6.1.a GDPR), collected through email confirmation. You may withdraw it at any time.
• Aggregated analytics and security logs: legitimate interest (Art. 6.1.f GDPR) in securing the site and preventing abuse.
• Advertising measurement pixels: your consent (Art. 6.1.a GDPR), collected purpose by purpose through the consent banner. No pixel loads until you say yes. You can withdraw your consent at any time (see the Cookies section).

4. Processors

• Brevo (newsletter email delivery): French company, data processed within the European Union.
• OVH SAS (hosting): French company, data hosted in France.

None of these processors may use your data for any other purpose.

Only if you consent (advertising measurement pixels, see the Cookies section), the following third parties may receive data:

• Meta Platforms Ireland Ltd (Meta pixel, for Facebook and Instagram).
• Google Ireland Ltd (Google Ads and Google Analytics).

Both may transfer data to the United States. The transfer is covered by the European Commission's standard contractual clauses. These pixels load only after your explicit consent, never before.

5. Retention

• Newsletter: as long as you remain subscribed.
• Security logs (IP, User-Agent): at most 30 days, then automatic deletion.
• Aggregated anonymous statistics: no time limit, as they cannot identify you.

6. Your Rights

Under the GDPR you have rights of access, rectification, erasure, restriction, portability and objection. To exercise them, email rgpd@philippe-anel.fr. You may also lodge a complaint with the CNIL at www.cnil.fr.

For the newsletter, the simplest way is the unsubscribe link at the bottom of every email: one click is enough.

Exclusion list. If you ask never to be contacted again (the "Remove me permanently" link in the confirmation email, or a request to rgpd@philippe-anel.fr), your address is added to an exclusion list. We then keep only that address, for the sole purpose of never soliciting you again, even if someone re-enters it on the form. This is the technical enforcement of your right to object.

7. Cookies and consent

By default, this site loads no advertising tracker. On arrival, no Meta or Google pixel runs until you have made a choice.

The applicable frame is Article 82 of the French Data Protection Act, which transposes the ePrivacy Directive, together with the GDPR. In plain terms: storing or reading a non-essential tracker on your device requires your prior consent, except for strictly necessary trackers or anonymous audience measurement. We follow the CNIL's recommendations on this point.

What does not require your consent

• Strictly necessary cookies: what makes the site work (your display preferences such as the theme, security). They are exempt from consent by law.
• Internal audience measurement: anonymous server-side counters, no cookie and no profiling. Your IP address is only used to resolve the country for the duration of the request, then immediately forgotten. Nothing that could identify you is stored, so no consent is required. This measurement is deliberately not shown as a choice in the banner, because the law does not require it and we do not want to ask you for needless consent. It includes the anonymous, aggregate tally of the consent choices themselves: how many people accept advertising tracking and how many refuse it, without ever knowing who. This tally holds no identifier and no IP address.

What requires your consent

The site may offer advertising measurement pixels (Meta, Google) to re-serve our content to you as ads. These pixels set third-party cookies and transfer data to the United States. They are subject to your consent, under Article 6.1.a of the GDPR.

• They are never loaded without your consent, collected purpose by purpose through the banner. Boxes are unchecked by default: nothing is pre-ticked, and closing or ignoring the banner does not count as acceptance.
• Refusing is as easy as accepting: the "Refuse all" button sits at the same level, with the same visual weight, as "Accept all".
• Every purpose and every recipient is set separately: you can accept one and refuse another.
• Your choice is kept and timestamped on your device, in your browser, not on our servers. It is asked again after thirteen months at most, or sooner if the scope of what you consent to changes.
• If you refuse, you are not asked again. A refusal is durable: we do not come back to ask you on every visit. You stay in control to change your mind whenever you want.
• You can change your mind at any time through the "Manage cookies" link at the bottom of every page. Withdrawing consent is as easy as giving it.
• Cookies set by these pixels have their own durations, defined by Meta and Google, available in their respective policies.

As of today, none of these pixels is active on the site yet. This section will be detailed (exact cookie identity, durations) when they go live.

8. Security

All communications are encrypted over HTTPS/TLS. The server applies strict security headers and rate limits. When the member area goes live, passwords will be hashed with a robust algorithm and never stored in clear text.