Last updated: July 20, 2026
This page explains what personal data this blog (blog.theopnv.com) processes, why, and what rights you have under the GDPR.
Data controller
Theo Penavaire, sole author and operator of this blog. Contact: support@theopnv.com
Cookies
This site does not set any cookies on a normal page visit. Two features are opt-in and only load third-party scripts (which may set cookies) after you explicitly interact with them:
- Comments: post pages show a “Load comments” button. Clicking it loads a giscus widget backed by GitHub Discussions. Nothing loads from giscus.app or github.com until you click that button.
- Newsletter form: focusing the email field loads Brevo’s form script and Cloudflare Turnstile (used to block spam signups). Nothing loads from those domains until you interact with the form.
What’s processed, and why
| Data | Purpose | Legal basis | Processor |
|---|---|---|---|
| IP address (server/hosting logs) | Serving the site, security | Legitimate interest | Vercel |
| Aggregated visit stats (page views, referrer, country) | Understanding readership | Legitimate interest | Umami (cookieless; no cross-site tracking) |
| Email address | Sending the newsletter | Consent (you submit the form) | Brevo (Sendinblue SAS) |
| Form interaction signals | Blocking automated spam submissions | Legitimate interest | Cloudflare (Turnstile) |
| GitHub identity, comment content | Publishing blog comments | Consent (you click “Load comments” and sign in) | giscus / GitHub |
Umami does not use cookies or local storage and does not track you across sites; it briefly uses your IP address to compute a daily, salted visitor count, then discards it.
Data retention
- Newsletter emails are kept until you unsubscribe (every email includes an unsubscribe link) or request deletion.
- Analytics data is aggregated and not tied to an identifiable individual.
- Comments you post via giscus live in the linked GitHub repository’s Discussions and are retained until you or GitHub remove them.
International transfers
Some processors above (Cloudflare, GitHub, Brevo) may process data outside the EU/EEA. Where that happens, it relies on the processor’s own GDPR safeguards (e.g. Standard Contractual Clauses).
Your rights
Under the GDPR, you can request access to, correction of, or deletion of your personal data, object to or restrict its processing, and ask for a copy in a portable format. To exercise any of these, email support@theopnv.com.
Changes to this policy
This page may be updated as the site’s tooling changes. Material changes will be reflected in the “Last updated” date above.