Privacy policy

Who is responsible for this data

The data controller is Aouraghe.

For any question about your data, write to contact@amafos.com, our dedicated contact address.

Waiting list

If you leave your email address on this page, it is stored only to notify you when AMAFOS opens. It is never shared or used for any other purpose. Deleted on request at contact@amafos.com.

What we collect, and nothing else

The site currently has a single form open to the public: the waiting list on the home page. It collects the following.

• Your email address. It is the only field you fill in, and the only one that identifies you.
• The fact that you ticked the consent box, and the date you signed up.

No other field is collected by this form. There is no advertising tracker, no resale, and no commercial sharing. The site does measure its traffic, and the “Audience measurement” section says exactly how.

Why, and on what basis

Signing up to the waiting list serves one purpose: telling you when access opens.

The legal basis for it is your consent, under Article 6(1)(a) of the GDPR. You give it by ticking the box on the form, and you may withdraw it at any time without having to explain yourself.

Messages you send to contact@amafos.com rest on our legitimate interest, under Article 6(1)(f) of the GDPR: answering the messages addressed to us and keeping a record of them. You may object to this processing by writing to us at that same address.

Audience measurement also rests on our legitimate interest, under the same article: knowing which pages are read and checking that they display quickly. No cookie is set and nothing is read from your device, so the prior consent required by Article 82 of the French Data Protection Act does not apply to this measurement. You may object to it by writing to contact@amafos.com.

For how long

Waiting list sign-ups are kept for 12 months at most after you signed up, or as soon as you ask for deletion if that comes first.

A deletion request is carried out on the whole row: address, consent and date. The row is deleted from the database. Copies may remain in the host's backups until they rotate out.

Messages you send to contact@amafos.com are kept for 24 months, then deleted.

Who else has access

Sign-ups are stored in a Supabase database dedicated to this purpose, separate from any other product data. Hosting region: Paris, France.

The site itself is hosted by Vercel Inc. Postal address of the host: 440 N Barranca Ave #4133, Covina, CA 91723, USA.

The signup confirmation email is sent by Resend (Plus Five Five, Inc., San Francisco, USA), our email sending processor. It receives your email address in order to send that message and keeps the delivery log for it. Nothing else you type into the form is passed on to it.

Where your data is:

• Your email address is stored in France (Paris, with Supabase).
• The AMAFOS service is hosted in the European Union (Amsterdam, with Railway).
• Site delivery is handled by Vercel, a US company: as with most websites, pages go through its infrastructure, and that infrastructure processes data outside the European Union. Your email address is not stored there. Vercel is also our audience measurement processor, see the next section.
• Sending the confirmation email is handled by Resend, a US company: your address is passed on to it in order to send that message. This transfer is covered by the European Commission's Standard Contractual Clauses and the EU-U.S. Data Privacy Framework.

One last third party sees you go by: the three-dimensional scene on the home page is loaded from Spline's servers. Your browser therefore sends them a request, which passes on your IP address. Their privacy policy does not say what they keep in the case of a scene embedded on a third-party site. Nothing you type into the form goes with that request.

Audience measurement

The site measures its traffic. It is the only processing of this kind, and it serves only to know which pages are read and whether they display quickly.

The tools in use today:

• Vercel Web Analytics, which counts page views.
• Vercel Speed Insights, which records display times from real visits.

Vercel Inc. acts here as an audience measurement processor, in addition to its role as the site's host. Nothing you type into the form is passed to it.

Vercel Web Analytics records, at each data point: the timestamp, the page URL and dynamic path, the referrer, filtered query parameters, an approximate location derived from the IP address (country, region, city), the operating system and its version, the browser and its version, the device type and the version of the measurement script.

No third-party cookie is set. A visitor is told apart by a fingerprint computed from their request, which is discarded after twenty-four hours and does not allow them to be followed from one site to another.

Vercel Speed Insights records: the route and URL, the network speed, the browser, the device type, the operating system, the country, the performance measurements and their attribution, the SDK version and the time of receipt. These readings are anonymous and do not allow a session to be reconstructed.

This list is kept up to date here: a tool added or removed shows up in it.

What your browser keeps

The site sets no advertising or analytics cookie. What is kept on your side is limited to making the site work.

• Your theme and your language, kept in your browser's local storage so the site opens the way you left it. They never leave your machine.

The waiting list sign-up stores nothing on your side: it submits the form, and that is all.

Your rights

The GDPR gives you rights over this data. Their scope depends on the legal basis of the processing concerned, and for some of them the regulation provides conditions of exercise and exceptions.

• Know what we hold about you, and get a copy of it.
• Have inaccurate information corrected.
• Have your data erased.
• Withdraw your consent at any time. Withdrawal does not undo what was lawful before it.
• Ask for the processing to be restricted, or object to it.
• Receive your data in a machine-readable format, to take it elsewhere.

To exercise any of these rights, write to contact@amafos.com. We answer within one month of receiving your request. That period may be extended by two months where the request is complex or where requests are numerous; in that case we inform you of the extension and of its reason within the first month.

If our answer does not satisfy you, you may lodge a complaint with the CNIL, the French supervisory authority, at cnil.fr.