Privacy Policy

Last updated: September 14, 2026

1. Data controller

The data controller is Benoît Bremaud (Brasse-Bouillon, pre-incubation project). Contact: contact@brasse-bouillon.com, or via the site form.

2. Data we collect

Contact data (the message and details you provide) submitted through the site form, or sent by e-mail to contact@brasse-bouillon.com (in which case, your sender address and the content of your message).
Newsletter subscription data (email).
Product questionnaire data (profile, usage, priorities, suggestions).
Questions asked to the FAQ assistant (message text only - do not include personal data).

The site uses no third-party audience measurement tool and no tracking cookies. No browsing data is collected for analytics purposes. Web fonts are self-hosted: no data is sent to a third-party font provider.

3. Purposes and legal bases

Replying to messages: legitimate interest and/or pre-contractual steps.
Sending newsletters: explicit consent (form checkbox).
Improving the product through questionnaire responses: explicit consent.
Answering questions asked to the FAQ assistant: legitimate interest (informing visitors about the project). Do not share personal data in your messages - the assistant never asks for any.

4. Recipients and international transfers

Data may be processed by the following technical processors:

Brevo (France, European Union) - waitlist management and the e-mails that go with it (subscription confirmation, beta-opening announcement). Your e-mail address is sent to Brevo, hosted in the EU, as soon as you submit the form: Brevo is what issues the confirmation e-mail and tracks the click. Until you click that link the address stays pending and is not added to the waitlist; if confirmation never comes, it is deleted without ever having been used for anything else. No transfer outside the EU.
Formspree, Inc. (USA) - receiving the questionnaire. The transfer outside the EU is governed by Standard Contractual Clauses (GDPR art. 46); a copy is available on request.
Cloudflare - website hosting (Cloudflare Pages), anti-bot protection of the waitlist form (Cloudflare Turnstile) and routing of messages sent to contact@brasse-bouillon.com (Cloudflare Email Routing). That service does not store messages: it forwards them to the data controller's mailbox. Cloudflare, Inc. is certified under the EU-US Data Privacy Framework; the transfer to the US is covered by the European Commission's adequacy decision.
Mistral AI (France, European Union) - generation of the website FAQ assistant's answers. Questions asked to the assistant are sent to the Mistral AI API, hosted in the EU; they are not used to train its models. No transfer outside the EU.

One word on where messages sent to contact@brasse-bouillon.com finally land: Cloudflare forwards them to a personal Gmail mailbox belonging to the publication director. Google therefore stores your sender address and the content of your message. Because this is a consumer Gmail account, Google does not act here as a processor bound by a data-processing agreement, but under its own terms of service — which is why it is not listed above. If you would rather not go through it, use the site form.

5. Data retention

Contact data: up to 3 years after the last interaction.
Newsletter data: until unsubscribe, or 3 years of inactivity.
Questionnaire data: up to 3 years for product analysis.
FAQ assistant: conversations are not stored by the site.

6. Your rights

Depending on your country of residence (EU GDPR, US local laws such as CPRA, etc.), you may request access, correction, deletion, restriction, objection, portability, and withdrawal of consent at any time. To exercise your rights, write to contact@brasse-bouillon.com or use the site form.

7. Security

We implement reasonable technical and organizational safeguards to protect data. As no system is fully secure, absolute security cannot be guaranteed.

8. Minors and alcohol

The website targets adults (18+). Brasse-Bouillon promotes responsible drinking.

9. Complaints

Please contact us first for any privacy question. You also have the right to lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or with the supervisory authority of your EU country of residence.