Last updated: 24 June 2026
Ecostylia collects little data, and never to sell it. This site works without advertising, without cross-site tracking and without a consent banner. It uses strictly necessary cookies (for example, to remember your language) and a first-party audience-measurement cookie, exempt from consent under the framework of the French data protection authority (CNIL) and switchable off at any time. Here is what we collect, why, and how to exercise your rights.
Who is responsible
The data controller is Ecostylia Media SAS (Paris trade register no. 934 442 898, 14 avenue de l’Opéra, 75001 Paris, France), the site’s publisher — see the legal notice.
A question about your data? Write to us through the contact form, subject “Personal data protection”.
What we collect, and why
Audience measurement
We count visits with Matomo, configured to follow the guidance of the French data protection authority (CNIL): a first-party audience-measurement cookie (13-month lifespan), an anonymised IP address, no user ID, no visitor profile, no session recording, no cross-referencing with other processing, and no transfer of non-anonymous data to third parties. This is used only to produce aggregate traffic statistics. The information collected is kept for 25 months at most (CNIL guidance). You can opt out of this measurement at any time below:
Newsletter
If you subscribe — which is your consent —, your email address is entrusted to Brevo (a French provider). Your subscription is confirmed by email (double opt-in). It is used only to send you the newsletter, for as long as you stay subscribed, and you can unsubscribe at any time using the link in every email. Open and click statistics are measured in an aggregated and anonymised way, without building any individual profile or segmenting subscribers by their opens or clicks.
Contact form
The information you send is used only to handle your request. The legal basis is our legitimate interest in replying to the messages we receive (or pre-contractual steps where your request concerns a service). To block automated submissions (spam), the form uses Cloudflare Turnstile, which processes technical signals strictly necessary to detect bots — without setting any cookie and without tracking you for advertising.
Embedded content (YouTube, Instagram, TikTok, X)
By default we show only a preview: no connection to the platform, no third-party cookie. The content loads only if you click it — and that click is your consent. When you load content, the platform concerned may then process your data under its own privacy policy and set its own cookies; not loading the content means declining.
Donations
Donations go through Tipeee or Ko-fi. Depending on the platform, we may receive some information about the donation (name or alias, email, amount, date, message) to track it and thank you. Payment details are handled by the payment platform: we never see or store them.
Cookies
The site sets no advertising or cross-site tracking cookie — so there is no banner to accept or decline in order to read Ecostylia. The only cookies used are: a first-party audience-measurement cookie (Matomo, exempt from consent, switchable off above), remembering your language, where applicable a security cookie, and an opt-out cookie if you decline audience measurement. None of these cookies is used to profile you or track you across sites.
Security and hosting
The site is hosted by Servebolt, on a server located in the United Kingdom (London). Since Brexit, the UK is a third country under the GDPR but benefits from a European Commission adequacy decision: transfers of personal data from the European Union to the UK take place without specific formalities for as long as that decision remains in force. It uses Cloudflare as a CDN and security service: to speed up pages, protect the site against attacks, and filter some automated traffic. In doing so, Cloudflare may process technical connection data (IP address, timestamp, browser, requests). As Cloudflare, Inc. is a US company, some of this data may be processed outside the European Economic Area; such processing is covered by the applicable contractual safeguards (Standard Contractual Clauses and, where relevant, the EU–US Data Privacy Framework). Matomo’s audience data, by contrast, stays within the European Union.
Like any website, our server keeps technical connection logs (date, browser, IP address). The only item that could relate to you is the IP address; we keep it solely for security — this is our legitimate interest — and never use it to track you. These logs are kept for 12 months at most, then deleted.
How long we keep data
- Newsletter email: for as long as you stay subscribed.
- Contact request: for the time needed to handle it, then limited archiving (12 months at most after the last exchange), unless a legal obligation applies.
- Matomo audience measurement: aggregate statistics kept for 25 months at most.
- Security logs: 12 months at most.
Your rights
Under the GDPR, you can access your data, have it corrected or erased, object to its processing, restrict its use, or port it.
To exercise these rights: the contact form, subject “Personal data protection”. We reply within one month. If you believe your rights are not being respected, you can lodge a complaint with the French data protection authority, the CNIL (cnil.fr), or with your local supervisory authority.
These rights apply to all our readers, wherever they are in the world.
Minors
The site is not intended for children under 15. In France, where an online service relies on consent, a minor under 15 must give their consent jointly with the holder of parental authority. If you believe a minor has given us data without this, write to us and we will delete it.
Updates
This policy may change as the site evolves. The date at the top of the page shows the latest version.