Privacy Policy
What we collect, why we collect it, and what you can do about it
Overview
Nocturea is an independent design studio based in France. This policy explains what happens to your personal data when you visit nocturea.com or get in touch with us.
The short version: we run no analytics, we set no cookies, and we do not track you across the web. The only personal data we actively collect is what you type into our contact form. There are, however, two third parties involved in making this site work, and we explain exactly what they see below.
For the purposes of the GDPR, Nocturea is the data controller for the data described here. You can reach us at contact@nocturea.com.
What we collect
When you use our contact form. We collect the name you enter, your email address, and the content of your message. We need these to read your message and reply to it.
When you simply browse. We do not ask you for anything and we do not build a profile of you. Our hosting provider keeps standard server logs, which typically include your IP address, the time of your request, the page you asked for and your browser's user agent. These are ordinary technical records used to run the site and keep it secure.
Loading the page also contacts Google. This site loads its typefaces from Google Fonts, so your IP address and browser details are sent to Google each time a page loads. See Who else is involved below.
We do not collect special category data, and we have no account system, so there are no passwords or profiles here.
Why we are allowed to use it
Under the GDPR we need a legal basis for each use of your data. Ours are:
- Answering your message — our legitimate interest in responding to people who contact us, and, where your message is about a possible project, taking steps at your request before entering into a contract.
- Server logs — our legitimate interest in operating the site, diagnosing faults and preventing abuse.
- Google Fonts — our legitimate interest in serving the site's design consistently.
Where we rely on legitimate interest, you have the right to object — see Your rights.
Who else is involved
We do not sell your personal data, and we do not share it for anyone else's marketing. A small number of providers do process data on our behalf so the site can function:
- Formspree — receives and delivers the messages you send through our contact form, including your name, email address and message. Formspree is based in the United States.
- Google Fonts — serves the site's typefaces. Google receives your IP address and browser details when a page loads. Google does not set cookies for this, but the request itself reveals your IP to Google.
- Our hosting provider — stores the site and keeps the server logs described above.
Transfers outside the EU. Because Formspree and Google are US-based, some of this data may be processed outside the European Economic Area. Where that happens, it is intended to be covered by appropriate safeguards recognised under the GDPR, such as an adequacy decision or the European Commission's standard contractual clauses.
We may also disclose data where the law requires it, or to establish or defend legal claims.
Following a link from this site to Discord, YouTube, X, Instagram, Pinterest, Dribbble or Planet Minecraft takes you to a service we do not control. Once you are there, that service's own privacy policy applies, not this one.
How long we keep it
We keep the messages you send us for as long as it takes to deal with your enquiry, and then for up to three years after our last contact with you, in case you come back to us. After that we delete them.
If a message leads to an actual project, we keep the records relating to that project for as long as we need them to meet our legal and accounting obligations.
Server logs are kept for a short period only, in line with our hosting provider's standard practice.
Security
The site is served over HTTPS, and we take reasonable technical and organisational measures to protect your data from loss, misuse and unauthorised access, disclosure, alteration or destruction. Access to the messages you send us is limited to the people who need it to reply.
No method of transmission over the internet is completely secure, so we cannot guarantee absolute security. Please do not send us passwords, payment details or other sensitive information through the contact form.
Your rights
If your data is protected by the GDPR, you have the right to:
- Access — ask for a copy of the data we hold about you;
- Rectification — have inaccurate data corrected;
- Erasure — ask us to delete your data;
- Restriction — ask us to limit how we use it;
- Portability — receive your data in a portable format;
- Object — object to processing based on legitimate interest;
- Withdraw consent — at any time, where we rely on consent.
To exercise any of these, email contact@nocturea.com. We will respond within one month. Asking costs nothing.
If you think we have handled your data badly, we would like the chance to fix it — but you also have the right to complain to your national data protection authority. In France, this is the CNIL.
Children
Our work involves Minecraft, so we know younger visitors find their way here. This site is not directed at children, and we do not knowingly collect personal data from anyone under 15 — the age of digital consent in France.
If you are under 15, please ask a parent or guardian before sending us a message. If you are a parent and believe your child has sent us their personal data, contact us and we will delete it.
Changes to this policy
We may update this policy when our tools or services change. The current version always lives on this page, and the "Last Updated" date at the top tells you when it last changed. If a change materially affects your rights, we will make that clear rather than quietly editing the page.
Contact us
Questions about this policy, or want to exercise your rights? Write to contact@nocturea.com, or use the contact page.