What we collect, and why
Short version: we keep what you send us so we can answer it, we count visits only if you say yes, and we sell nothing to anyone
Who is responsible
GreDami, an independent studio working from Paris, France, decides what happens to the data described here — it is the data controller in the wording of the GDPR.
You can reach us about anything on this page at contact@gredami.com.
What we collect
When you write to us. The enquiry form asks for your name and email address, and optionally your company and phone number. It also carries whatever you type into the message, the kind of work you picked, and which language version of the site you were reading.
When the form is sent. An anti-spam check reads your IP address and a few signals from your browser, so that a person can be told apart from a script. It is not used to identify you, or to follow you from one site to another.
If you allow measurement. Analytics records the pages you opened, roughly where in the world you are, the kind of device and browser you used, and the site that sent you here. It never receives your name or your email address, and it is not loaded at all unless you allow it.
What the server writes down. Our host keeps ordinary access logs — an IP address, a timestamp, the page requested. We do not control these and do not use them.
We do not ask for anything else. There is no account to create, no tracking pixel, and no advertising network anywhere on this site.
Why, and on what legal basis
- To answer you. Everything the enquiry form collects exists so a person can read it and reply. The basis is the step towards a contract you asked us to take, and our legitimate interest in running a studio that answers its post — GDPR Article 6(1)(b) and 6(1)(f).
- To see which pages are useful. Analytics runs on your consent alone, and on nothing else — GDPR Article 6(1)(a). Refusing costs you nothing: the site behaves identically either way.
Cookies and measurement
No cookie is written and no measurement script is fetched before you answer the banner. Decline, and the site never contacts Google at all.
If you allow it, we use Google Analytics 4 with IP anonymisation switched on. You can withdraw that at any time — the Cookie choice link at the foot of every page reopens the question, and declining stops the collection from that moment.
The typefaces this site is set in are served from our own domain, so reading a page never announces your visit to a font provider.
Who else sees it
- Our host. The site is served by GitHub Pages (GitHub, Inc., United States), which necessarily handles the request in order to answer it. Transfers outside the EU rest on the European Commission's standard contractual clauses.
- Google. Only if you allowed measurement, and only the analytics data described above.
- Cloudflare. The enquiry form posts to a Cloudflare Worker, and Cloudflare Turnstile checks that a person and not a script is sending it — for which it sees your IP address and a few signals from your browser. Cloudflare, Inc. is established in the United States; transfers rest on the European Commission's standard contractual clauses.
- Resend. Carries your enquiry to our mailbox as email. We send from Resend's European region, so the message itself is processed inside the European Union.
Nobody else. We do not sell, rent or trade what you send us, and we do not use it to advertise to you elsewhere.
How long we keep it
- Enquiries: three years from our last exchange with you, which is the usual French commercial limitation period, then deleted.
- Analytics: fourteen months, the shortest retention Google Analytics 4 offers.
- Host logs: whatever our host keeps them for; we neither extend nor read them.
Your rights
Under the GDPR you may ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to stop or restrict what we do with it, ask for it in a portable form, or object to it altogether. Where we rely on your consent, you can withdraw it without giving a reason and without affecting what was lawful before.
Write to contact@gredami.com and we will answer within a month. If our answer does not satisfy you, you may complain to the French supervisory authority, the CNIL, or to the authority where you live.
Changes to this notice
If what we do changes, this page changes with it and the date below moves. Nothing here is applied retroactively to data already collected under an earlier version.
Last updated 7 September 2026