Privacy Policy
What this site does with your data, the cookies it sets, and how to exercise your rights.
Data controller
The data controller is the publisher of the site, identified on the legal notice page.
See the legal noticeThe contact form
The contact form collects your name, email address and the content of your message. This information is used solely to answer your request.
It is sent by email to the shop and is not kept in a database on this site: once that email is sent, no copy of your message remains here.
To limit automated submissions, a technical fingerprint of your IP address is briefly kept. This fingerprint is salted and irreversible: it cannot be used to recover your address. It is automatically deleted after one hour at most.
Online ordering
Online sales are not open yet. Once they are, placing an order will collect your name, email address, telephone number and, for deliveries, your postal address: the information needed to prepare and ship your order, sent to the shop and kept for as long as needed to track it.
Cookies and local storage
This site sets the minimum technical footprint it needs to function. No audience-measurement, advertising or social-network cookie is used, so no consent banner is shown: there would be nothing for it to ask you to accept.
- NEXT_LOCALE — remembers whether you browse the site in French or English. Technical cookie, kept for one year.
- The contents of your cart and your chosen collection method are kept in your browser's local storage, not in a cookie, and are never sent to a server until you place an order. They stay on your device until you clear them.
- A marker prevents the opening animation from replaying during your visit. It is cleared when the tab closes.
- A session cookie is set only when signing in to the order-management area, reserved for shop staff: no ordinary visitor receives one.
- The shop map uses OpenStreetMap, not Google Maps: the map sets no third-party cookie.
- Payment takes place on Stripe's own site, after a redirect. Any cookies Stripe sets are set on their own domain, under their own policy, never on this one.
Technical providers
Three providers are involved in running the site, each for a specific purpose.
- Supabase — database and authentication for the management area. Hosted in Paris (eu-west-3 region). No transfer outside the European Union for this service.
- Resend — sending transactional emails (order confirmation, contact form). Hosted in Ireland. No transfer outside the European Union.
- Vercel — hosting the site and running the server code, in the Europe (Paris) region. As Vercel Inc. is a US company, a transfer of data outside the European Union remains possible for the hosting itself, notably logs; it is governed by the European Commission's standard contractual clauses.
None of these providers is authorised to use your data for any purpose other than the ones described here.
Your rights
Under the General Data Protection Regulation, you have a right of access, rectification, erasure, objection and portability over your data.
You can exercise these rights by writing to the shop, by telephone or by post at the address below, or through the contact form.
01 40 27 82 7501 42 72 91 0636 avenue Paul Doumer, 75116 ParisOpen the contact formYou may also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).
Last updated
This policy was published on 4 September 2026 and may be revised as the site evolves.