Privacy
Privacy policy
What happens to what you write to us, in plain terms.
Data controller
Marijana Jericevic — Sensorium
LD Croix Hinchou, 22110 Mellionnec, France
Email for privacy questions: hello@sensorium.buzz
Contact form
The contact form collects your name, your email address, the subject you choose and your message. The site language is stored too, so we can reply in the right language.
This information is used only to receive your message, to answer it and to continue the correspondence if needed.
The legal basis is legitimate interest: you write to us and we reply. Your details are never used for marketing, shared or sold.
To limit automated submissions, the number of messages per period is capped using a technical fingerprint of your IP address (SHA-256 hash; the address itself is not kept).
Retention
Messages are stored in the site database and copied by email to our inbox.
Ordinary correspondence is kept for a maximum of two years after the last exchange and is then deleted automatically. This is Sensorium's own chosen retention policy — not a statutory three-year requirement. An individual exchange may be kept longer only where a specific legitimate reason requires it (for example an ongoing project or a dispute).
Anti-spam records (hashed IP fingerprint and timestamp) are deleted after 30 days. Email delivery logs (recipient, template, status, timestamp) are deleted after 90 days.
These deletions run automatically every night as a scheduled database task, so the periods stated here are the periods actually applied.
Recipients and processors
Site hosting and database: the Lovable platform (Lovable Cloud), delivered through the Cloudflare network. This project's database is hosted in the European Union (AWS eu-west-1, Ireland).
Notification email delivery: the same platform's email service.
Form anti-spam protection: Cloudflare Turnstile.
Typefaces are self-hosted on this site: no request is made to Google Fonts.
No other service receives the data you send us.
Transfers outside the European Economic Area
The database, and therefore your messages, are hosted in the European Union (Ireland).
Some technical providers (Cloudflare, for site delivery and anti-spam protection) belong to companies established in the United States and may process technical data outside the EEA.
Such transfers rely on the contractual safeguards provided for by the GDPR (standard contractual clauses and, where applicable, the EU–US Data Privacy Framework).
Your rights
You have the right to access, rectify, erase, restrict and object to the processing of your data, and where applicable the right to data portability; where processing is based on consent, you may withdraw it at any time.
Write to the address above to exercise these rights. You may also lodge a complaint with the French data protection authority, the CNIL.
Security
We use appropriate technical and organisational measures to protect the information you submit: encrypted connections, restricted database access and authentication for site administration.
The hashed IP fingerprint used to cap automated submissions is pseudonymised security data, not anonymous data; it is treated as such and deleted after 30 days.
Cookies and local storage
Sensorium uses no advertising cookies, no audience-measurement tool and no behavioural or cross-site tracking.
The site stores your language choice in your browser's local storage so it can be remembered on your next visit.
A session token is stored only when the site's administration is used, after signing in.
Cloudflare Turnstile is used in its standard mode with a one-time token: pre-clearance is not enabled, so this site sets no cf_clearance cookie.
These items are strictly necessary or functional, so no consent banner is required.
Embedded content
Some pages may offer a video hosted by YouTube or Vimeo. It is never loaded automatically: a Sensorium placeholder is shown instead, and nothing is requested from the external platform until you click “Load external video”.
If you choose to load the video, YouTube or Vimeo then receives your IP address and may set its own cookies; their privacy policies apply from that moment, for that video only.