Privacy Policy

Last updated: July 16, 2026

1. Data Controller

Mandaniaina Randriambinintsoa, freelance developer based in Antananarivo, Madagascar.
Email: mandaniaina.randriambinintsoa@gmail.com
Phone: +261 34 65 186 95

2. Data Collected

2.1 Navigation Data (Google Analytics 4)

This site uses Google Analytics 4 (Measurement ID: G-2Q177TH3CR) to analyze traffic. GA4 collects anonymized data: pages visited, session duration, device type, country and city of origin (approximate geolocation based on IP address). IP addresses are anonymized by Google before storage.

2.2 Product Data (PostHog)

This site may use PostHog to understand how visitors use the pages: page views, clicks, navigation paths, conversions, browser-side errors, heatmaps, and session replays. This data is used only to improve the portfolio experience and identify friction points.

2.3 Automation Showcase (Real-time Visitors)

The homepage displays a real-time visitor table for technical demonstration purposes. The displayed data (city, country) comes from Google Analytics real-time data and is stored in our Supabase database. IP addresses are temporarily retained (1 hour maximum) for visit deduplication, then automatically deleted. No IP address is displayed or shared with third parties, and no name or email is associated with this data.

2.4 Contact Form

If you contact us via the form, we collect your name, email, and message. This data is used solely to respond to your inquiry.

2.5 Quiz

The service recommendation quiz collects your answers and email (if provided). This data is used only to send you personalized recommendations.

3. Legal Basis

Data processing is based on your consent (Article 6.1.a GDPR) for Google Analytics and PostHog, and legitimate interest (Article 6.1.f) for site functionality and contact request handling.

4. Data Retention

• Google Analytics data: 14 months (GA4 default setting)
• PostHog data: according to the configured PostHog project retention settings
• Contact data: 12 months after last exchange
• Quiz data: 12 months
• Visitor logs (showcase): 30 days

5. Data Sharing

Your data is not sold or shared with third parties, except:

• Google LLC (Google Analytics) — hosted in the US, compliant with EU-US Data Privacy Framework
• PostHog Inc. (product analytics) — hosted according to the region configured in PostHog
• Supabase Inc. (database hosting) — EU servers (eu-central-1, Frankfurt)
• Vercel Inc. (website hosting) — global CDN network

6. Your Rights

Under GDPR, you have the following rights:

• Right of access to your personal data
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object

To exercise these rights, contact us at: mandaniaina.randriambinintsoa@gmail.com

7. Cookies

This site uses essential technical cookies and analytical cookies (Google Analytics and, when configured, PostHog). Google Tag Manager is loaded only after user interaction (scroll, click, or touch) to minimize performance impact.

8. Security

The site is protected by HTTPS with HSTS (2 years), Content Security Policy, and recommended security headers (X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy).