Your email is used to let you know about the launch.

Who is responsible?

Project: Ohmiaou. The full identity and address of the person responsible remain to be filled in; the legal information is not yet final.

Contact and exercise of your rights: contact@ohmiaou.com.

What we collect, and why

Your email address, the language of the page and the dates of your request and of its confirmation are used to send you a validation link, then the announcement of the opening of the Boxes, creations or services you chose. The basis is your consent, confirmed by email. We keep a record of this choice and of the version of the text shown to you.

If you give them, your first name and city, both optional: the first name is used to greet you in our emails, the city to know where interested people are, in order to prepare deliveries and services near them. The basis is the same consent. On an address that is already confirmed, they are only saved after you click the link received.

No surname, phone number, delivery address, payment details or password. Without an email address, we simply cannot notify you. We do not add you to a separate newsletter.

Waiting lists per service: on the creations page (album, mug, puzzle, T-shirt, poster, calendar, birthday gift box, engraved bracelet) or for the professional photographer service, you can ask to be notified when it opens. We then record, with your email address, the service chosen and, for the professional photographer, the city you give, so that the team can get back to you about a session near you. Nothing else: no photo, no payment. You can choose several creations or services and a Box composition in the catalogue before giving your address. A single link confirms these choices together; no new choice is asked of you in the email. The basis is your consent, confirmed by the link received for the selected topics. You only receive the openings you asked for: signing up to one service does not sign you up to the Box launch invitation, and the reverse is also true.

In “Build the Box”, you can keep the composition you chose: the fish, the main toy and the balls (three candidate product identifiers) and, if you wish, the keepsakes you like among the creations. Your cat’s name is optional; it lets us personalise their Box and the confirmations. The other information passed on from the earlier version of this journey (life stage, play styles and context, things to avoid, selection preference, expected frequency) remains attached to the sign-up concerned. These choices are used to understand the Box you have in mind and the creations that interest you, then to estimate the quantities to prepare and the demand for the services. Forecasts only group confirmed choices; they are not guaranteed orders. They trigger no order, reservation, subscription or automated decision that affects you.

You choose to send them together with your sign-up request and can withdraw your consent at any time. The answers are not used to establish a medical or behavioural diagnosis. The products shown remain candidates to be qualified: this profile does not promise that a specific model will be available or suitable without later verification.

A separate optional study may have been offered after confirmation; it no longer is. Its answers, when it stated that no email was requested, are kept separately and are not linked to your list address. Useful preferences will in any case be reconfirmed before any purchase.

While you choose in the catalogue or in “Build the Box”, your selection stays in the page: nothing is stored in your browser, and nothing leaves your device before you voluntarily send the form.

To protect the service against abusive submissions, counters use a protected hash of the IP address rather than storing it in plain text in our database. This security processing is based on our legitimate interest in protecting the service. Hosting logs may contain connection information; they are not used for prospecting.

If you write to our contact address, your sender address and the content of your message are used to answer your request, in particular to exercise your rights. Do not attach an identity document unless a proportionate verification is asked of you.

For how long?

These are the deletion deadlines configured in the application:

• Unconfirmed address: seven days after the last sending of the link, or after the request if no link was sent.
• Confirmed sign-up: twelve months after the most recent confirmation of an active purpose, or earlier withdrawal.
• Composition from “Build the Box”, chosen keepsakes and earlier profile: the same duration as the sign-up they are attached to. They are deleted with it, in particular when you unsubscribe.
• Waiting-list service, first name, city and the city given for the photographer: deleted with the sign-up they are attached to, so at the latest twelve months after the address is confirmed, or earlier in case of withdrawal or unsubscription.
• After unsubscribing: the address is removed from the list immediately. A deletion hash, not readable as an address, is kept for three years, solely to respect your objection.
• Proof of consent or withdrawal: five years at most from each event, in a separate intermediate archive after the sign-up is deleted. It contains only an unreadable HMAC hash of the address, the purpose, the status, the version of the text and the dates. Requests left pending are deleted after seven days and do not join this evidentiary archive.
• Optional answers to this study: twelve months after they were first recorded, with no extension when sending is retried.
• Anti-abuse counters: two days after their last use.

When a deadline is reached, the data is erased by a daily purge that is transactional and can be replayed. How recently it ran is checked by the readiness check of each environment. The database technically refuses to delete a proof that is still attached to a sign-up or that is too recent. Withdrawal blocks any new sending before the active data is deleted.

The five-year duration of the evidentiary archive is a documented choice based on the ordinary civil limitation period, not a duration imposed on consent. This archive is never used to send a message. The three-year duration of the objection list follows the CNIL’s recommendation to prevent an accidental re-subscription. See the CNIL’s recommendations on commercial retention periods and on the suppression list, and article 2224 of the French Civil Code.

Detailed visit tracking is optional

Separately from this tracking, anonymous counters add up the loads of public pages per day. They contain no identifier, IP address, individual time, origin or URL parameter, and are never matched with this list. The “Turn off anonymous measurement” button at the bottom of the site and the browser’s opt-out signals let you turn them off for the following pages. Totals are kept for thirteen months at most. See the notice on counters and trackers.

Without your agreement in the banner, we do not create a measurement identifier. Your sign-up still works. With your agreement, random identifiers are used to count the pages and steps of the journey, the type of device and where the visit or campaign comes from. Neither your email, nor your first name, nor your city, nor your cat’s name, nor its constraints, nor the identifiers of the candidate products are placed in these events. A sign-up is only attributed to a visit if the same browser still holds your agreement.

Your choice, agreement or refusal, is remembered for 183 days. Only after agreement, the measurement cookie is valid for 183 days and the local identifier expires after thirteen months; the session identifier disappears with the browser session. The origin of the visit can be used for thirteen months from the first remembered point of contact, with no extension at each visit, then it is removed from storage the next time it is read. None of these elements is used after your agreement expires. Withdrawal deletes them and prevents attributing a later confirmation. Pseudonymous events become eligible for purge after thirteen months. The “Manage my trackers” button lets you change your mind.

A separate technical cookie, valid for fifteen minutes after your confirmation, is only used to display its result. It contains neither an email address nor a measurement identifier. This cookie and the memory of your tracker choice are necessary for these functions, not for advertising.

Who processes the data?

The person responsible for Oh Miaou and the service providers actually needed for the service process this data: Vercel for pages, requests, API execution and technical logs; Neon for the PostgreSQL database; Resend for sending emails and their logs; Hostinger only for the messages you send to our contact mailbox. The contact mailbox does not automatically receive a copy of the list. The data is not sold.

The production database is isolated in Neon’s Frankfurt region. The Vercel functions of this version are configured in the Frankfurt region (fra1). A European compute region does not by itself guarantee that the providers’ metadata, backups, support access or other processing all stay within the European Economic Area.

In the code, the routes of this list turn off Vercel Analytics, Speed Insights, Google and Plausible. The optional events specific to the journey are recorded in Neon only after your agreement. The kill switch of this release also turns off these third-party providers on the other pages; they receive neither the list email nor your cat’s profile from this journey.

Neon also covers its self-service plans and its data processing agreement includes the standard contractual clauses needed for ancillary processing outside the EEA. Resend states that it stores messages and their logs in the United States, even when sending starts from a European region; its data processing agreement applies to each account and notably includes the standard contractual clauses. Resend announces that emails and logs are kept for thirty days, then for up to seven days in backups; some account data may remain for up to ninety days after closure. The Hostinger email services are covered by its DPA; a deleted mailbox may remain recoverable for up to thirty days.

The project currently uses Vercel Hobby, a plan reserved for personal or non-commercial use. Vercel’s public DPA covers Pro and Enterprise. The review of the plan and of Oh Miaou’s contractual coverage remains to be finalised; opening this list is not a compliance validation.

Changing your mind or exercising your rights

Every email from the list offers an unsubscribe link. A screen asks you to confirm, to prevent an email filter from unsubscribing you automatically. No account or password is needed.

Depending on the processing concerned, you can request access, rectification, erasure, restriction or portability of your data, object to processing based on a legitimate interest and withdraw your consent by writing to contact@ohmiaou.com. A proportionate identity check may be necessary. A reply is given in principle within one month.

The composition, keepsakes, first name and city sent are attached to your sign-up: they can therefore be included in an access or portability reply and are deleted with the sign-up. The answers to a separate study explicitly presented as having no email cannot be found from your address; we do not create this link to answer a request.

You can also lodge a complaint with the CNIL (the French data protection authority) or with the data protection authority of the EU country where you live or work, or where the alleged infringement took place.