Privacy, cookies and GDPR

Data controller

The data controller is Challenge My Project (SAS, SIREN 880 614 110), 90B rue de Fougères, 35700 Rennes, France, operating under the Archivum brand. For any privacy-related question, please write to [email protected].

Data collected on this site

1. Site visit

When you browse archivum.cloud, your IP address, user-agent and page paths may be logged for technical purposes by our CDN provider (Cloudflare). These logs are used to secure the service — abuse filtering, TLS termination — and are not used for any other purpose.

2. Audience measurement (Google Analytics 4)

The site is instrumented in Consent Mode v2. Until you accept audience measurement via the consent banner, no data is sent to Google. If you accept:

• IP addresses are anonymised by GA4;
• no personalised advertising is triggered (ad_storage remains denied);
• Google Analytics cookies (_ga, _ga_*) are set for 24 months;
• data is processed by Google Ireland Limited.

3. Email correspondence

If you write to [email protected], your address and the content of your message are kept for as long as necessary to handle your request, then archived or deleted.

Legal bases

• Service security and technical logging — legitimate interest (GDPR art. 6(1)(f)).
• Audience measurement — consent (GDPR art. 6(1)(a)).
• Replying to your message — pre-contractual measures taken at your request (GDPR art. 6(1)(b)).

Hosting and sub-processors

• Scaleway SAS (France, Paris region) — origin hosting. No data you submit to us is replicated by Archivum to any third-party host located outside the EU.
• Cloudflare, Inc. (USA, contracting entity) — CDN, TLS termination, abuse filtering. The technical transfer of logs to Cloudflare relies on the EU-US Data Privacy Framework and on the Standard Contractual Clauses signed with Cloudflare.
• Google Ireland Limited (Ireland) — Google Analytics 4 audience measurement, only if you have explicitly accepted it via the consent banner.

Cookies and local storage

The site does not set tracking cookies by default. Your browser may store locally:

• archivum_consent_v1 (localStorage, 180 days) — your audience-measurement preference;
• archivum_theme (localStorage, no expiry) — your light/dark theme preference.

Neither key is transmitted to us.

If you have accepted audience measurement, Google Analytics cookies (_ga, _ga_*, 24-month duration) are set. You can revoke this consent at any time by clearing the site's localStorage and cookies in your browser, or by disabling Google Analytics through the official browser add-on at tools.google.com/dlpage/gaoptout.

Retention periods

• Cloudflare CDN technical logs — per the sub-processor's policy, generally a few days.
• GA4 analytics data — 14 months.
• Email correspondence — duration of the relationship, plus 3 years (civil prescription period).

Your rights

Under the GDPR and the French Data Protection Act, you have the following rights:

• right of access to the personal data concerning you;
• right of rectification;
• right of erasure;
• right to restriction of processing;
• right to data portability;
• right to object;
• right to withdraw your consent at any time;
• right to set instructions regarding the fate of your data after death.

To exercise these rights, please write to [email protected]. You will receive a reply within one month.

If, after contacting us, you consider that your rights have not been respected, you may lodge a complaint with the French data protection authority (CNIL) — 3 place de Fontenoy, 75007 Paris, France.

Changes

This policy may be updated. A new version will be published whenever a substantive change occurs. When the Archivum services (documentary archive, site continuity, email continuity) become operational, this policy will be expanded to describe the processing activities specific to them.

Last updated: 8 May 2026.