In short
The brochure site you are reading (espilon.net) sets no analytics cookies, embeds no third-party trackers, and collects no personal data on its own. The only data we ever process is what you choose to send us — an email, a Discord message, or content you publish on the platforms we operate.
Data controller
The Espilon Association (see legal notice) acts as the data controller for processing carried out on espilon.net and its sub-domains.
Cookies
espilon.net (the brochure pages: home, about, research, this page, the legal notice) sets no cookies. A small localStorage entry named espilon-lang is used by your browser to remember your language preference; this stays on your device and is never transmitted.
Sub-domains such as learn.espilon.net, ctf.espilon.net and git.espilon.net may set strictly-necessary session cookies for authenticated areas. These are documented in the respective interfaces.
What we collect (and why)
- Emails you send us — processed only to answer you. Kept for as long as the conversation is open, then deleted within 12 months unless we have an active relationship.
- Discord interactions — the Espilon Discord server is operated by Discord Inc.; their own privacy policy applies. We process the messages we receive there only in the context of community moderation.
- Server logs — standard web-server access logs (timestamp, IP address, requested URL, user-agent) are kept for up to 30 days for security and abuse-prevention purposes (LCEN obligation).
Third parties
The brochure pages load fonts from Google Fonts (Google LLC, United States). When your browser fetches the font files, Google receives the technical metadata of the request (IP address, user-agent). We are working to self-host these fonts to eliminate this transfer.
We do not embed any other third-party scripts, analytics, social-media widgets or advertising on espilon.net.
Your rights
Under the GDPR (and the French Loi Informatique et Libertés) you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and the right to data portability.
To exercise these rights, write to eun0us@espilon.net. We will respond within 30 days. You may also file a complaint with the French data-protection authority (CNIL).
Changes to this policy
We will update this page when our practices change. The date at the top of the page reflects the latest revision. Substantive changes are also announced on our Discord and via the project newsletter when applicable.