Privacy policy

Last updated: October 21, 2026

This page is an English translation of the French privacy policy (politique de confidentialité). In case of discrepancy, the French version prevails.

1. Data controller

Nemo Ciment, sole trader (auto-entrepreneur), SIREN 904 205 135
12 rue François Pontieux, 59265 Aubigny-au-Bac, France
Email: nemociment@gmail.com

2. Data collected

This site collects personal data in five situations:

• Contact form: name, email address, subject and content of the message.
• Booking a video call: name, email address, chosen date and time slot.
• Free SEO audit by email: email address, address of the audited site, audit report, your answer to the optional “contact me again” box, date of the request. To limit abuse, a fingerprint (hash) of your IP address and a fingerprint of your email address are also recorded.
• Free SEO tools: the address of the site or page you enter in a tool, processed for the time of the request, along with the IP address of your connection. The address you enter is not recorded. To limit abuse, a fingerprint (hash) of your IP address is kept for 10 minutes along with the number of requests.
• Audience measurement, only if you accept it in the cookie banner: pages viewed, visit duration, source, device and browser type, through Google Analytics (loaded by Google Tag Manager). Your IP address is not stored by Google Analytics.

No advertising pixel is used. If you decline audience measurement, no Google Analytics cookie is set. You can change your mind at any time through the “Cookies” link at the bottom of every page. The tools set no cookies. The link to an audit report contains an access token: it is placed in your browser’s session storage, erased when you close the tab, and removed from the displayed address.

3. Purposes and legal basis

• Handling contact requests. Legal basis: legitimate interest (replying to a request initiated by the user).
• Managing appointments. Legal basis: performance of a contract or of pre-contractual measures (creation of a Google Calendar event with a Google Meet link).
• Free SEO audit: checking your email address, running the audit you asked for and sending you its report. Legal basis: performance of your request (the “I agree to receive ... the report” box). A copy of the summary is sent to me to follow up requests.
• Contacting you again after the audit, only if you tick the optional box, unticked by default. Legal basis: your consent, which you can withdraw at any time through the deletion link in every email or by writing to me.
• One free audit per site and per address over 12 months, and abuse prevention (IP address and email address fingerprints). Legal basis: legitimate interest (keeping the free service usable).
• Free SEO tools: running the analysis you asked for and limiting abuse (20 requests per 10-minute window and per visitor). Legal basis: legitimate interest (providing a free service and protecting it from abuse).
• Site security and operation (technical server logs at the host). Legal basis: legitimate interest (protecting the site and keeping it running).
• Audience measurement: knowing which pages are read in order to improve the site. Legal basis: your consent, given or refused in the cookie banner.

4. Recipients of the data

Booking data is sent to Google LLC (Google Calendar, Google Meet) in order to create the appointment. Google acts as a processor and handles this data in accordance with its own privacy policy. Audience measurement data is processed by Google Ireland Ltd (Google Analytics), which acts as a processor; it may be transferred to the United States under the Data Privacy Framework. To answer a request, some tools query a third-party service with the address or domain name you enter. Your IP address is not passed on to them, because the request comes from this site’s server. These are Google (PageSpeed Insights API and Chrome UX Report API, for the speed test and the Core Web Vitals history), crt.sh and Cert Spotter (certificate logs, for the subdomain finder), the RDAP services of domain name and IP address registries, including rdap.org (domain age, host), the Internet Archive (Wayback Machine) and IndexNow (api.indexnow.org, which relays addresses to participating search engines, including Bing). The other tools read the page you point to directly: the analysed site sees a request coming from this site’s server. Contact form data is received directly by email and is not shared with any third party. Free audit data is stored on the site’s server, at the host LWS, in a folder that cannot be reached from the web, and is not shared with any third party. The host LWS also records technical server connection logs (IP address, date, page requested), needed for the site to run and stay secure.

5. Retention period

• Contact messages: kept for as long as needed to manage the business relationship, then deleted within 12 months.
• Booking data: kept until the appointment takes place, then deleted within 30 days.
• Free SEO audit: a request that is never confirmed is deleted after 24 hours. Once the report is sent, your email address and the report are deleted after 30 days, or 3 years if you agreed to be contacted again (the period the CNIL, the French data protection authority, allows for a prospect’s data, counted from collection or from your last contact). The IP address fingerprint is erased after 24 hours. The audited domain, the date and the email address fingerprint are kept for 12 months for the one-audit-per-site rule, then deleted. The “Delete my data” link in every email immediately erases the address, its fingerprint and the report; only the domain and the date then remain, for 12 months at most.
• Free SEO tools: the address you enter is not kept. The IP address fingerprint and the request count are erased after 10 minutes. The result of some tools (public data about the analysed site, unrelated to you) stays cached for 10 minutes to 24 hours depending on the tool, to avoid asking for it again.
• Technical server logs: kept by the host LWS for the period it sets, in line with the legal obligations that apply to hosting providers.
• Audience measurement: Google Analytics cookies valid for 13 months at most, visit data kept for 14 months at most. Your choice in the banner is stored in your browser until you change it.

6. Your rights (GDPR)

Under the General Data Protection Regulation (GDPR, EU 2016/679) and the French Data Protection Act (loi Informatique et Libertés), you have the following rights:

• Right of access: obtain a copy of the data concerning you.
• Right to rectification: have inaccurate data corrected.
• Right to erasure: request the deletion of your data.
• Right to data portability: receive your data in a structured format.
• Right to object: object to processing based on legitimate interest.

To exercise these rights, contact: nemociment@gmail.com. You will receive a reply within one month.

If you are not satisfied with the reply, you can lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés, the French data protection authority).

7. Security

This site is served exclusively over HTTPS. Booking data is stored in a protected file on the server, inaccessible from the web. Reasonable technical and organizational measures are in place to protect your data against unauthorized access.

8. Changes

This policy may be updated at any time. The date of the last update is shown at the top of the page. In the event of a substantial change, a notice will be published on this site.