This page is an English translation provided for convenience. The French version is the legally binding text.
In short
This site sets no cookies, shows no advertising and performs no profiling. There is no form: nothing is asked of you to browse the site. Audience measurement is deliberately minimal and honours the "Do Not Track" and "Global Privacy Control" signals — if either is enabled in your browser, nothing is measured at all.
The sections below detail, processing by processing, what is collected and why.
1. Data controller
The data controller is Brian PLUS, publisher of brianplus.com, whose full details appear in the legal notice.
Contact for any question about personal data: contact@brianplus.com.
Given the nature and volume of the processing involved, appointing a Data Protection Officer is not required.
2. Processing activities
| Processing | Purpose | Legal basis | Retention |
|---|---|---|---|
| Self-hosted audience measurement | Understand which content is read and improve the site | Legitimate interest (art. 6.1.f GDPR) | 6 months for raw logs, then anonymous aggregates |
| Plausible audience measurement | Aggregated traffic statistics | Legitimate interest (art. 6.1.f GDPR) | No individual data retained |
| Server technical logs | Security, abuse detection, scanner blocking | Legitimate interest (art. 6.1.f GDPR) | 6 months maximum |
| Language preference | Show the site again in the language you chose | Choice expressed by the user | Until you clear it |
| Appointment booking | Arrange a 30-minute conversation | Pre-contractual measures (art. 6.1.b GDPR) | Duration of the relationship, then legal archiving |
| Email exchanges | Answer your enquiries | Legitimate interest / pre-contractual measures | 3 years from last contact |
3. What is measured, precisely
Self-hosted audience measurement relies on an in-house script (pulse.js) sending events back to this same server. None of these events leave the site's own infrastructure. The following is recorded:
- the page viewed and the referring page when it is external;
- scroll depth and active reading time;
- display of and clicks on call-to-action buttons, plus outbound clicks;
- window size and display language;
- IP address, timestamp and browser, written to the server logs.
A random session identifier links the pages of a single visit. It is stored in the browser's sessionStorage, disappears when the tab is closed and is never matched to your identity. No cross-site tracking is performed, and no data is sold or used for advertising.
4. Trackers and local storage
The site uses no cookies. It does rely on two browser storage mechanisms:
bp_lang(localStorage): remembers the language you selected;bp_s,bp_n,bp_q(sessionStorage): visit identifier and page counter, cleared when the tab closes.
These fall under the consent exemptions defined by the French data protection authority (CNIL) — storing a choice expressed by the user, and strictly limited audience measurement. No consent banner is therefore displayed. You may delete them at any time from your browser settings without degrading access to the site.
5. Recipients and processors
- OVH SAS (France) — hosting of the site and its logs. Data remains on servers located in the European Union.
- Plausible Insights OÜ (Estonia) — cookie-free audience measurement, processed on servers located in the European Union. The service collects no identifying personal data and does not track visitors across sites.
- Calendly LLC (United States) — appointment booking. The service is not embedded in the site's pages: it is only reached if you click a booking button, which takes you to calendly.com. Any data you enter there is processed by Calendly under its own privacy policy, including the transfers outside the European Union that it governs.
Apart from these providers, no data is shared with third parties, except where legally required or upon judicial request.
6. Your rights
You have rights of access, rectification, erasure, restriction of processing, objection and portability over data concerning you, as well as the right to give instructions on what becomes of your data after your death.
One point deserves emphasis: because audience measurement relies on legitimate interest, you may object to it without giving reasons. The most direct way is to enable the "Do Not Track" or "Global Privacy Control" signal in your browser — the script then stops measuring immediately.
To exercise your rights, write to contact@brianplus.com. You will receive a reply within one month. The difficulty of identifying an individual from the data collected here may limit the exercise of certain rights, in line with article 11 GDPR.
If you believe your rights are not being respected, you may lodge a complaint with the French data protection authority: cnil.fr — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.
7. Security
The site is served exclusively over HTTPS, with HSTS and a restrictive content security policy. Fonts are hosted on the domain itself, which avoids any request to a third-party service without your knowledge. Automated intrusion attempts are blocked and the corresponding logs are kept for security purposes only.
8. Changes
This policy may change alongside the site. The last-updated date appears at the top of this page; substantial changes will be flagged on the home page.