Privacy policy
Last updated: .
This page is a courtesy translation. In case of discrepancy, the French version prevails.
Data controller
PixL-Art Studio, SASU (French simplified joint-stock company with a
sole shareholder), Chartres Trade and Companies Register (RCS de Chartres), SIREN 105654560.
Contact: contact@pixlartstudio.com
What this site does not do
This site sets no cookies and writes nothing to your browser's storage. It loads no advertising tracker, no social media widget, no font and no script from another site, and no audience measurement is plugged into it. That is why it shows no consent banner.
Contact form
The site asks you for data in two places. The first is the form on the
Contact page: you fill in the boxes of the brief, namely
production, type of project, intended date and location, message, email address and, if you
wish, budget and phone number. The language of the page is added and, if you arrived through a
campaign link (the QR code on a business card, for instance), the utm_source,
utm_medium and utm_campaign parameters of that link.
The second is the “Production” box on the
showreel page. The name you write there is placed in the
address of the contact page that then opens (prod parameter): it pre-fills the
brief and follows your links from one page of the site to the next. Like any page address, it then appears in your browser
history and among the technical data processed by the host. It reaches the studio only if you
send the brief.
This data is used to answer your request. The processing is based on steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR).
Your brief is sent to the studio by email, and an acknowledgement goes to the address you gave. Email delivery is entrusted to Resend (Plus Five Five, Inc., United States), a processor within the meaning of the GDPR. The data is passed on only to Resend, to the site's host (see below) and to the studio's email service, which receives these emails. The site itself keeps no copy of the brief: it has no database.
Abuse protection
So that the form cannot be used to send messages in bulk, the site counts submissions. To do so it records, with its host, two digital fingerprints (HMAC-SHA-256, computed with a secret key): that of your IP address (for an IPv6 address, that of its network prefix) for one hour, to accept at most five briefs per hour; that of your email address for one day, to send only one acknowledgement per day. The addresses themselves are not recorded; these fingerprints nevertheless remain pseudonymised personal data, not anonymous data. This processing is based on the studio's legitimate interest in protecting its form (Article 6(1)(f) GDPR).
Hosting and media
The site is hosted by Cloudflare, Inc. (United States). Like any host, Cloudflare processes the IP address and technical data of each request in order to serve the pages and protect them. The form runs on its infrastructure: your brief passes through it, without the site recording it there, before being handed to Resend.
Videos and their poster images are served from media.pixlartstudio.com, a storage space of the
studio with the same host. Your browser contacts it as soon as you open a page that carries a
film, before any action on your part: the home page, the showreel page, a project page.
Retention periods
- Fingerprint of the IP address: one hour.
- Fingerprint of the email address: one day.
- Briefs received by email and the exchanges that follow: three years after the last exchange with you. If an order follows, they are kept for the duration of the business relationship, then for the periods the law requires of the studio.
Transfers outside the European Union
Cloudflare, Inc. and Plus Five Five, Inc. (Resend) are established in the United States. Both state that they adhere to the EU–U.S. Data Privacy Framework and govern these transfers by the European Commission's Standard Contractual Clauses.
Your rights
You may request access to your data, its rectification, its erasure, the restriction of processing or its portability, and object to processing based on legitimate interest. Write to contact@pixlartstudio.com: the studio replies within the one-month period set by the GDPR. If the answer does not satisfy you, you may lodge a complaint with the CNIL, the French data protection authority.