Privacy Policy

Last updated: March 27, 2026

1. Data Controller

Mandaniaina Randriambinintsoa, freelance developer based in Antananarivo, Madagascar.
Email: mandaniaina.randriambinintsoa@gmail.com
Phone: +261 34 65 186 95

2. Data Collected

2.1 Navigation Data (Google Analytics 4)

This site uses Google Analytics 4 (Measurement ID: G-2Q177TH3CR) to analyze traffic. GA4 collects anonymized data: pages visited, session duration, device type, country and city of origin (approximate geolocation based on IP address). IP addresses are anonymized by Google before storage.

2.2 Automation Showcase (Real-time Visitors)

The homepage displays a real-time visitor table for technical demonstration purposes. The displayed data (city, country) comes from Google Analytics real-time data and is stored in our Supabase database. No personally identifiable information (name, email, full IP address) is displayed or stored in this table.

2.3 Contact Form

If you contact us via the form, we collect your name, email, and message. This data is used solely to respond to your inquiry.

2.4 Quiz

The service recommendation quiz collects your answers and email (if provided). This data is used only to send you personalized recommendations.

3. Legal Basis

Data processing is based on your consent (Article 6.1.a GDPR) for Google Analytics, and legitimate interest (Article 6.1.f) for site functionality and contact request handling.

4. Data Retention

• Google Analytics data: 14 months (GA4 default setting)
• Contact data: 12 months after last exchange
• Quiz data: 12 months
• Visitor logs (showcase): 30 days

5. Data Sharing

Your data is not sold or shared with third parties, except:

• Google LLC (Google Analytics) — hosted in the US, compliant with EU-US Data Privacy Framework
• Supabase Inc. (database hosting) — EU servers (eu-central-1, Frankfurt)
• Vercel Inc. (website hosting) — global CDN network

6. Your Rights

Under GDPR, you have the following rights:

• Right of access to your personal data
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object

To exercise these rights, contact us at: mandaniaina.randriambinintsoa@gmail.com

7. Cookies

This site uses essential technical cookies and analytical cookies (Google Analytics). Google Tag Manager is loaded only after user interaction (scroll, click, or touch) to minimize performance impact.

8. Security

The site is protected by HTTPS with HSTS (2 years), Content Security Policy, and recommended security headers (X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy).