Back

Privacy Policy

Last updated: October 2026

GDPR Compliant — EU

Your Privacy Matters

Benjamin Sanna EI (Devbrek) is committed to protecting your personal data and respecting your privacy rights. This policy explains how we collect, use, and protect your information in compliance with the General Data Protection Regulation (GDPR) and applicable French data protection laws.

1. Data Controller

Benjamin Sanna EI (Devbrek)781 avenue de Monsieur Teste, 34070 Montpellier, FranceEmail: contact@devbrek.fr

2. Data We Collect

We only collect the minimum data necessary to operate this website:

Contact Form:

  • —Name and email address
  • —Message content

Analytics:

  • —Visit date and count (aggregated, no personal data)

Emile AI Chat:

  • —Conversation content: sent to Mistral AI to generate the reply, never stored by Devbrek

3. Legal Basis for Processing (GDPR)

We process your data based on:

  • —Consent — when you submit the contact form, and for the resulting emails
  • —Contract — to respond to your service requests
  • —Legitimate Interest — to improve the website and prevent abuse
  • —Legitimate Interest — to answer questions asked through the Emile chat

4. How We Use Your Data

  • —Respond to contact requests and project inquiries
  • —Send email notifications via Resend (Resend Inc., USA)
  • —Monitor website traffic (aggregated, anonymous)
  • —Improve website content and user experience

5. Data Sharing & Transfers

We do NOT sell your personal data. We share data only with the following service providers:

  • —Vercel Inc. (USA) — website hosting and deployment
  • —Neon Inc. (USA) — database hosting (contact messages, analytics)
  • —Resend Inc. (USA) — email notifications
  • —Mistral AI SAS (France) — AI processing for Emile chat
  • —Zoho Corporation B.V. (Netherlands, EU hosting) — business email (contact@devbrek.fr)

For providers located outside the EU, data transfers are covered by Standard Contractual Clauses (SCCs) or equivalent mechanisms.

6. Your GDPR Rights

Under GDPR, you have the right to:

  • —Access — request a copy of your personal data
  • —Rectification — correct inaccurate data
  • —Erasure — request deletion of your data (right to be forgotten)
  • —Portability — receive your data in a structured format
  • —Restriction — limit how we process your data
  • —Object — object to processing based on legitimate interests
  • —Withdraw Consent — at any time, without affecting prior processing

To exercise these rights, contact: contact@devbrek.fr. We will respond within one month (Article 12 GDPR).

7. Data Retention

  • —Contact messages: 12 months from receipt
  • —Emails related to a contact request (Resend notifications, Zoho Mail inbox): 12 months from receipt
  • —Visit counter: only a daily visit total (date and count), with no cookie and no personal data at all (no IP address, browser, page visited or identifier). These anonymous totals are kept indefinitely.
  • —Emile conversations: never stored by Devbrek; kept for 30 days by Mistral AI for abuse monitoring, then deleted

You may request deletion of your data at any time by contacting us.

8. Data Security

We implement industry-standard security measures including HTTPS encryption, secure database access, and environment variable protection. Access to personal data is strictly limited to the data controller.

9. Cookies

This website uses two strictly necessary cookies: NEXT_LOCALE (remembers your chosen language, a session cookie deleted when you close your browser) and admin_token (admin area authentication session, HttpOnly cookie, 24-hour duration). We do not use third-party tracking cookies or advertising cookies. A daily visit counter (total number of visits per day, with no cookie or personal data) is also used for statistical purposes. No consent banner is required: these two cookies are strictly necessary, and the visit counter stores nothing on your device.

10. EU-Specific Provisions

You have the right to lodge a complaint with your local Data Protection Authority:

11. Children's Privacy

This website is not intended for children under 16. We do not knowingly collect data from minors. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this policy. In the event of a significant change, we will inform data subjects by email or by a notice visible on the website. The date of the last update is shown at the top of this page.

13. Contact

For any privacy-related questions or to exercise your rights: contact@devbrek.frResponse time: within one month (Article 12 GDPR)