Privacy & cookies

Otmane Aiboud is responsible for the personal data processed through this professional portfolio. For any privacy question or rights request, email otmane.aiboud@gmail.com.

• Site delivery and security — legitimate interests. Vercel receives the technical information needed to deliver the site, including your IP address, browser information, requested URL and request time. Technical and security logs may be processed to keep the service available and prevent abuse. This processing is separate from the optional audience statistics.
• Audience statistics — your consent. Only after you agree, the site counts approved public pages and actions, the referring website’s hostname, country, language and device category. A daily pseudonymous identifier is calculated from the IP address and browser information to estimate unique visitors. Raw IP addresses and browser strings are not saved in this statistics store. This is pseudonymisation, not a promise of irreversible anonymity. Query strings and URL fragments are excluded. No email address, message, advertising identifier or cross-site browsing history is collected by this tool.
• Contact — responding to your request. There is no contact form or account for visitors. Email and external contact links open the service you choose. If you write to me, I receive your address and the information you send. The legal basis is my legitimate interest in responding, or steps taken at your request before entering a contract, depending on the request. Sending a message is optional; without contact details I cannot reply.

Screen size and available device capabilities are checked locally to adapt the 3D display. These rendering checks stay in your browser and are not sent to the audience statistics tool.

These data are not used to sell advertising, make automated decisions about you or build an advertising profile.

• Privacy choice: 180 days. A necessary first-party cookie remembers acceptance or refusal, the date and the policy version. It is used to honour your choice, not to identify you for advertising. You can change it at any time. Without an affirmative choice, statistics remain off.
• Optional statistics: 100 days. Statistics are grouped by UTC day. Daily aggregates and daily pseudonymous identifiers expire no later than 100 days after collection in Redis, without extending this period on new visits. The fallback memory/file store removes old days when it is next used. There is no persistent visitor identifier stored in your browser for this measurement.
• Sound preference: until cleared. Sound is off by default. After you use its control, local storage remembers whether it is on or off. This preference stays in your browser, is not sent for statistics, and can be removed in your browser settings.
• Administration: 24 hours. A secure session cookie is used only after the site administrator signs in. It is not used for ordinary visitors and is removed on sign-out.
• Messages and technical logs. Emails are managed in my mailbox for the time needed to respond and follow up the conversation; they are not stored in this site’s statistics. If an exchange leads to a contract, applicable retention obligations are handled separately. Technical log retention follows the hosting service’s operational and security rules; no additional visitor log database is created by this portfolio.

Access is limited to Otmane Aiboud and the providers needed to operate these services: Vercel for hosting and technical security; Upstash for the optional statistics store when Redis is configured, otherwise the application uses its own memory/file fallback; Google (Gmail) for receiving and managing emails sent to my published address; and the email or external contact service you choose to use when writing to me.

Vercel, Upstash and Google operate internationally, including in the United States. Their published privacy documents describe the safeguards they use, including the EU–US Data Privacy Framework and standard contractual clauses where applicable. This site does not claim that all processing stays within the European Economic Area. You may contact me for information about the safeguards relevant to your data.

• Vercel privacy notice ↗
• Upstash privacy policy ↗ · Data processing agreement ↗
• Google (Gmail) privacy policy ↗ · International transfer safeguards ↗

External links, including project demos, have their own privacy policies. Their services are contacted when you follow the link; the portfolio does not embed their tracking tools.

Use “Cookie settings” to refuse statistics or withdraw your consent at any time, as easily as accepting. Refusal does not limit access to the site. Withdrawal stops future collection; it does not affect the lawfulness of processing already carried out.

Under the conditions set by the GDPR, you can request access, correction, erasure or restriction of your personal data, object to processing based on legitimate interests, and request portability where applicable. Write to otmane.aiboud@gmail.com. Requests are normally answered within one month; any lawful extension will be explained within that first month.

The statistics store is not designed to identify a named visitor. I may be unable to link a statistical record to you and will not collect extra identifying information solely for that purpose. Please avoid sending sensitive information unnecessarily.

You can also lodge a complaint with the French data protection authority: CNIL complaints ↗.