Privacy
Last updated: 9 October 2026.
This English version is provided for information only. In case of any discrepancy, the French version prevails.
This site shows no advertising. It offers analytics, described below, which are loaded only if you accept them: until you do, nothing is stored and nothing is measured. If you accept, some cookies set by Microsoft (Clarity) also serve Microsoft’s advertising. Apart from analytics, the only personal data kept is what you write yourself in the site’s forms (contact and free audit). As on any website, your IP address is sent to the servers that deliver the pages and files: see below.
What is collected, and why
The contact form collects your name, your email address, your company name if you give it, and the message you write. This is used only to reply to you and to prepare a quote if there is one.
The free audit form collects your website address, your email address and, if you wish, your name. This is used only to reply to you and, if you ask for one, to prepare a quote.
This information is never sold, never passed on, and never used to send you a newsletter or any other marketing.
Legal basis and how long it is kept
The processing is based on your request: you write to get an answer and, where applicable, a quote (steps taken at your request prior to a contract, Article 6(1)(b) of the GDPR). Messages and audit requests are kept for three years after the last exchange, beyond which getting back in touch no longer makes sense. Exchanges that led to a project are kept for as long as French accounting rules require.
Who has access
Your messages and audit requests are read by Guillaume Fingar alone: there is no team and no third-party sales software. Only the site’s host (Hostinger) acts as a technical processor.
Cookies
Until you accept the analytics, this site sets no cookie. No embedded social network, and no advertising shown on this site. If you accept, the cookies described in the next two sections are set; if you decline, none are, and the question comes back only after six months. The accessibility widget, described below, sets no cookie at all.
Analytics (Google Analytics)
To count visits and see which pages are read, I use Google Analytics, installed by Google’s Site Kit plugin. It gives me aggregated statistics: pages viewed, where visits come from, type of device. I cannot use it to identify you by your name or your email address.
Nothing runs until you accept. Google Analytics’ scripts are in the page but disabled: your browser does not run them and does not contact Google before you click “Accept”.
If you accept, two cookies from this site are set: “_ga”, which holds an anonymous identifier, and “_ga_P60Y7JM2VB”, which holds the session state, two years each. The data is processed by Google (Google Ireland Limited, acting as a processor) and may be transferred to the United States under the EU–US Data Privacy Framework. It is kept for fourteen months at most in Google Analytics.
Analytics (Microsoft Clarity)
To see which pages are read and where visitors lose interest, I use Microsoft Clarity. It records your visit: pages viewed, clicks, scrolling and pointer movement, which makes it possible to replay the session. The fields you fill in are masked by the tool.
Nothing is loaded until you accept. Clarity’s script is not even present in the page before you click “Accept”. Microsoft itself requires this explicit consent in the European Economic Area.
If you accept, the following are set: two cookies from this site — “_clck”, which holds an anonymous identifier for about a year, and “_clsk”, which links the pages of a single visit and expires within the day — along with cookies set by Microsoft from its own domains (“MUID”, “CLID”, “ANONCHK”, “MR”, “SM”), some of which also serve Microsoft’s advertising and can last up to thirteen months.
The data is processed by Microsoft, acting as a processor for the analytics; Microsoft also uses some of its own cookies for its own advertising, under its own privacy statement. The data may be transferred outside the European Union under Microsoft’s framework (standard contractual clauses and the EU–US Data Privacy Framework). The recordings stay available for thirty days: that period applies to the data held by Microsoft, not to the lifetime of the cookies above.
Changing your mind: the “Cookies” link at the bottom of every page reopens the banner. If you decline after accepting, analytics stops at once and this site’s cookies (“_ga”, “_ga_P60Y7JM2VB”, “_clck” and “_clsk”) are deleted; the ones Google and Microsoft set on their own domains have to be removed from your browser, as this site cannot reach them. Your choice is kept in your browser, with its date, and you are asked again after six months.
Fonts and animations
The fonts are hosted on the same server as the site: displaying them calls no third-party service.
The library that animates the page (GSAP) is loaded from cdnjs, a Cloudflare service. As with any downloaded file, your IP address is sent to it at that moment.
Accessibility widget
The accessibility button at the bottom of every page is built in-house: it calls no third-party service and sets no cookie. Your settings (text size, contrast, animations stopped…) are stored only in your browser’s local storage, not on this site, so that they are restored on your next visit. Details and checks: see the accessibility statement.
Your language
If your browser is not set to French, this site shows you its English version. Your choice of language, when you use the flag in the header, is stored in your browser alone, never on the site.
Your rights
You have the right to access, correct, erase, restrict and object to the data concerning you. A request sent to guillaume@nineteenfiftystars.fr, through the contact form, or to the details in the legal notice, is enough: it will be handled within thirty days.
If the answer does not satisfy you, you may refer the matter to the French data protection authority, the Commission nationale de l’informatique et des libertés (CNIL), www.cnil.fr.
Security
The site is served over HTTPS. Messages and audit requests received are kept in a mailbox protected by a password and two-factor authentication.