Privacy policy

Last updated: April 24, 2026

This privacy policy describes how Rusty Serverless Engineering collects, uses, and protects your personal data when you visit this website.

Data controller

The data controller for personal data is:

Rusty Serverless Engineering SASU
41 rue Simone Veil, 93400 Saint-Ouen-sur-Seine, France
Contact : contact@rustysl.com

Data collected and purposes

Hosting server logs

When you visit this website, the hosting server (Amazon Web Services, eu-west-3 region — Paris, France) automatically records certain technical data: IP address, browser type, operating system, pages visited, date and time of the visit. This data is stored in France and collected to ensure the proper functioning and security of the site.

Legal basis: legitimate interest (site security and operation).

Contact requests

When you contact us by email at contact@rustysl.com, we collect the information you voluntarily provide (name, email address, message content). This data is used solely to respond to your request.

Legal basis: performance of pre-contractual measures at your request (Article 6.1.b GDPR).

Audience measurement

This website operates its own first-party audience measurement. For every page you visit, the following information is recorded: the date and time, the path of the page viewed, the page language, a coarse country code (derived by our CDN from your IP address), a broad browser family (desktop, mobile, tablet, or bot), the host part of your referrer URL when you arrive from an external site, and, when you follow a tagged link (URLs containing a `?from=` parameter), the value of that tag. No data is used for advertising, no profiling is performed, and no data is shared with any third party.

To distinguish returning visitors, this site generates a random identifier on your first visit and stores it in your browser's `localStorage` under the key `rustysl_visitor_device_id`. Your browser's same-origin policy guarantees that no other site can read it; it is therefore strictly scoped to this website and cannot be used to track you anywhere else. You can erase it at any time by clearing site data for this domain in your browser settings.

A second random identifier is stored in `sessionStorage` under the key `rustysl_session_id` to group pageviews within a single browsing session. It is automatically deleted by your browser when you close the tab.

As a fallback when browser storage is unavailable (for example, in private browsing mode), a technical hash is computed on our server from your IP address and User-Agent string, salted with a secret key. This hash cannot be reversed to your IP address.

None of these identifiers is shared with or accessible to any third party. They exist solely to power the aggregate statistics of this single website. They are stored for a duration of 12 months, in accordance with the French CNIL's recommandations.

Legal basis: legitimate interest in understanding site usage (Article 6.1.f GDPR). This processing qualifies for the consent exemption provided by the CNIL for audience measurement, as it is strictly limited to statistical purposes on a single site, uses scope-limited identifiers, and is not shared with any third party.

Planned developments

In the future, this site may integrate:

  • An authenticated area for certain content, requiring the creation of a user account (email address, password). This data will be processed on the basis of contract performance (Article 6.1.b GDPR).

This policy will be updated accordingly before any such features are implemented.

Data sharing

Your personal data is not sold, rented, or disclosed to third parties for commercial or advertising purposes.

The only sub-processor with access to technical data is our hosting provider, Amazon Web Services EMEA SARL (38 avenue John F. Kennedy, L-1855 Luxembourg), acting as a data processor within the meaning of the GDPR. All data is hosted in the AWS eu-west-3 (Paris) region, on French territory.

Data retention

  • Server logs: 12 months maximum.
  • Contact data (emails): retained for the duration of the business relationship, then deleted within a reasonable timeframe.
  • Audience measurement events: 13 months maximum, with automatic deletion managed by the database's time-to-live feature.
  • Retention periods will be specified for any features added in the future.

Data hosting and transfers

All site data is hosted in France, in the AWS eu-west-3 (Paris) region. No personal data is transferred outside the European Union as part of hosting this website.

Cookies and local storage

This website does not place any cookie on your device and does not use any advertising tracker. The only items ever written to your browser's storage are the two first-party audience-measurement identifiers described in the audience measurement section above (`rustysl_visitor_device_id` in `localStorage` and `rustysl_session_id` in `sessionStorage`). Both are scoped to this domain by your browser and can be erased at any time by clearing site data in your browser settings.

Should cookies be used in the future (for instance, for authentication), this section will be updated and, where required, a consent mechanism will be implemented in accordance with CNIL recommendations and applicable regulations.

Your rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

  • Right of access to your personal data
  • Right to rectification of inaccurate or incomplete data
  • Right to erasure of your data
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing

To exercise any of these rights, you can contact us at: contact@rustysl.com. We are committed to responding within one month.

You also have the right to lodge a complaint with the French data protection authority (CNIL): www.cnil.fr.