Privacy Policy

Who I am

TA Embedded is an embedded software business based in Lyon, France. I am responsible for the personal data collected through this website. You can reach me about anything in this policy at contact@ta-embedded.com.

What I collect and why

• Your account: email address, name, and a profile photo if you add one. If you sign in with Google or GitHub, I receive your name, email address and profile picture from them. Passwords are handled by Supabase and stored hashed; I never see them. Why: to provide your account (performance of a contract).
• Learning data: the courses you enrol in and the lessons you complete. Why: to show your progress (performance of a contract).
• Project requests and the contact form: your name, email address, company and what you tell me about your project. They are stored in my database and sent to my inbox. Why: to answer you and prepare a quote (steps taken at your request before a contract).
• Newsletter: your email address, stored with Brevo, only if you subscribe. Why: to send you new articles (consent). Every email has an unsubscribe link.
• Blog comments: your name, email address (never shown publicly) and comment. Why: to publish your comment and contact you about it if needed (legitimate interest).
• Analytics, only if you accept cookies: Google Analytics records the pages you visit, your approximate location, and your device and browser type. Why: to understand which pages are useful (consent).
• Technical data: my website hosting provider processes your IP address and browser information to deliver pages and protect the site (legitimate interest).

I don't sell your data, use it for advertising, or make automated decisions about you.

Cookies and local storage

Essential, so no consent is needed: your sign-in session, your theme and language, your cookie choice, small preferences such as your learning streak, and, once you like a blog post, a random ID that remembers your likes.

Analytics, only after you click Accept: Google Analytics cookies (_ga, _ga_*). You can change your choice at any time with the button below or the "Cookie settings" link at the bottom of every page. Withdrawing your consent deletes the analytics cookies. I ask again every 6 months.

Who else processes your data

• Supabase: database, file storage and sign-in.
• Brevo (France): emails and the newsletter.
• Google: analytics, only with your consent, and sign-in if you choose Google.
• GitHub: sign-in, if you choose GitHub.
• My website hosting provider: serving the pages.

Some of these providers are based in the United States or may process data there. Those transfers rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

How long I keep it

• Account and learning data: for as long as your account exists. Ask me and I'll delete it.
• Contact and project requests: up to 3 years after our last exchange, or longer if we work together and accounting rules require it.
• Newsletter: until you unsubscribe.
• Blog comments: until you ask me to remove them.
• Analytics: up to 14 months.

Your rights

Under the GDPR you can access, correct or delete your data, restrict or object to its use, get a copy in a portable format, and withdraw your consent at any time. Email contact@ta-embedded.com and I'll reply within one month. If you're not satisfied with my answer, you can complain to the CNIL (cnil.fr).

Security

Data is sent over HTTPS, and access to it is limited to what each feature needs.

Changes to this policy

If this policy changes, I'll update this page and the date at the top.