Julien Launay← Back to home

Privacy

Updated 7 October 2026

I’m Julien Launay, and I operate this website and its newsletter.

Website

This website uses basic Datadog page-view and performance analytics as described below. It does not use advertising trackers, session recordings or Cloudflare’s analytics beacon.

The website runs on OVHcloud infrastructure in Canada. Cloudflare delivers and protects the website and its photographs, and processes connection and request information such as your IP address to do so. Cloudflare may use security cookies when needed to protect the service.

Datadog receives operational monitoring for the server. This is separate from browser analytics. The website’s access logs record request methods, response status, size and duration; they omit visitor IP addresses, request paths and queries, cookies and request bodies. Infrastructure providers may process their own connection and security records under their applicable arrangements.

External links take you to other services, which have their own privacy practices. For questions about this website or your data, contact [email protected].

Website analytics

Datadog RUM receives basic page views and performance measurements automatically when you open Home or Privacy. There is no analytics consent prompt. Measurements include page timing, loading and responsiveness, browser, device, language, time-zone and connection information, and references to page elements involved in performance measurements. Collection depends on your browser allowing analytics, so these counts are not a complete measure of readership.

Datadog generates temporary session and view identifiers in memory. A full-page load or reload creates a new session; it is not a reliable measure of a visit or a person. The SDK also stores a random tab identifier in sessionStorage under _dd_tab_id. That identifier links activity across reloads in the tab and can be retained when a browser restores a tab. These identifiers are pseudonymous, not anonymous. We do not set a name, email address or persistent browser/user identifier.

This analytics configuration writes no cookies or localStorage. It does not export clicks, feature interactions, errors, resource events, long-task events, form fields or newsletter content. Session Replay, profiling, diagnostic telemetry and tracing are disabled. Page URLs are reduced to Home or Privacy; query strings, fragments and referrers are removed. Performance resource URLs are reduced to fixed categories.

Datadog processes analytics in the United States. It receives the connection IP to deliver the service, but IP addresses and IP-derived geolocation are excluded from stored analytics. Views and derived sessions are retained for up to 30 days. The tab ID remains in sessionStorage when collection is paused.

You can pause future collection for the current page through Analytics options. This pause lives only in memory: reloading or opening another page starts analytics again, and other open tabs are unaffected. Pausing does not retract events already sent. The site does not save an analytics preference.

If this browser has a saved choice from the site’s previous consent-based version, the new version removes that choice and its host-only Datadog session cookie. Already open pages running the previous version keep their old behavior until refreshed. Previously collected data follows the earlier retention periods: up to 30 days for views, sessions, actions and errors, and 15 days for resource and long-task measurements.

Newsletter consent is separate. For questions or requests about data already collected, contact [email protected]. Without a name or email in analytics, identifying which past events relate to you may require additional information.

Newsletter

Email subscriptions are not available yet. The notice below describes how the newsletter will work when signup opens. You can subscribe via RSS now.

I, Julien Launay, use your email address to confirm your subscription and, after you confirm, send a newsletter summarizing my latest writing and appearances at most once a month. Some months may have no newsletter. Joining this list does not subscribe you to other websites using the same email service. You can withdraw your consent at any time using the unsubscribe link in a recent email.

I keep your email address, the list you joined, your subscription status, the consent version you accepted and relevant dates. The service records delivery attempts, outcomes, bounces and complaints to avoid duplicate or unwanted mail. It uses hashed address and connection identifiers to limit repeated requests. Hashes are still personal data. Confirmation and unsubscribe links contain secret, expiring tokens; the database stores only hashes of those tokens.

Connection rate-limit hashes expire after 24 hours. Hashed records that prevent repeated confirmation requests expire after 48 hours without new request or delivery activity, and are removed by the next successful hourly cleanup. These short-lived protections can remain after you unsubscribe or request deletion to prevent further unwanted confirmation messages.

Your address stays on the active list while you are subscribed. Unconfirmed addresses are removed after seven days, and unsubscribed addresses after 30 days. Minimal evidence of confirmed consent is retained for 12 months after you leave. Identifying details of resolved delivery records are removed after 90 days. Unresolved delivery problems may require minimal matching information to remain until reviewed; they do not cause automatic resending. Minimal suppression and replay records are retained to respect opt-outs, prevent unwanted re-enrollment and avoid repeated messages. Unsubscribing stops queued newsletters, though a message already being delivered may still arrive.

The service runs on OVHcloud infrastructure in Canada. Cloudflare processes addresses, message content and delivery events to send mail and handle failures; it also handles connection information at the public subscription pages. Encrypted recovery backups are stored with Backblaze B2 in the United States. Datadog receives operational metrics; subscriber addresses, message content and secret link tokens are excluded from this service's Datadog collection. Your email provider also receives the messages. Provider processing can take place outside your country and follows the applicable provider arrangements.

The emails contain no tracking pixels or click-tracking redirects. The newsletter application adds no cookies or analytics scripts to confirmation/unsubscribe pages. Ordinary links lead directly to their destination, whose own privacy practices apply.

Encrypted backups can retain older copies after deletion from the active service. They are restricted to recovery, and current deletion and suppression records must be reapplied before a restored service can send. There is currently no promised 90-day maximum for all shared recovery snapshots. Removal from this service cannot delete a message already in your inbox or every provider's copy.

For access, correction or deletion requests, an expired unsubscribe link, or questions about the newsletter, contact [email protected]. I may need to verify that a request relates to your address. A deletion request removes your address, links and consent detail from the active subscription record; minimum suppression/recovery records and necessary delivery-resolution evidence may remain as described above.