Privacy Policy
Last updated: November 3, 2026
emblem.run is designed to collect only what is necessary. This policy explains what data is processed, why, and how to exercise your rights.
Data controller
Thibault Fayard EI, 24 avenue Monnot, 71100 Chalon-sur-Saône, France.
For any question about your data: thibaultfayard.pro@gmail.com.
Data collected and purposes
Account: when you sign in with GitHub (OAuth), we receive your name, email and avatar. Purpose: create and secure your account. Legal basis: performance of the contract.
Portfolio content: the information you enter (profile, projects, experience, education, stack, posts). Purpose: generate and publish your portfolio. Legal basis: performance of the contract.
Contact messages: when a visitor uses your portfolio’s form, their name, email and message are forwarded to you. Legal basis: legitimate interest in letting you be contacted.
Audience analytics: first-party, cookieless measurement. No raw IP address or advertising identifier is stored — a short-lived hashed visit identifier is used, and raw events are purged within 30 days. Legal basis: legitimate interest.
AI features: when you use AI (importing a résumé or notes, filling a section, improving or translating a field, reviewing), the text involved is sent as-is to Anthropic (Anthropic, PBC) to produce the answer. Pasted text is not kept by emblem.run — only the result you accept is stored. A usage counter (calls and tokens per day) is kept to prevent abuse, without the content. Legal basis: performance of the contract.
Visitors of your portfolio: cookieless visit statistics (page views, reading time, country, device type, referring site reduced to its domain name, domain of external links clicked). The IP address and browser are only used to compute a hashed identifier, specific to each portfolio and renewed every day; they are never stored. “Do Not Track” and “Global Privacy Control” are honored: nothing is sent at all. The contact form is protected by Cloudflare Turnstile.
Product feedback: if you use “Help improve emblem.run”, your message, its type and the editor page you were on are stored with your account and may be emailed to the team. Legal basis: legitimate interest in improving the service.
Retention
Account and content: kept while your account is active, then deleted on request or after closure.
Analytics: aggregates kept anonymously; raw events purged within 30 days.
Contact messages: kept until you delete them.
Product feedback: deleted with your account.
Processors and hosting
Application hosting: Vercel Inc. (https://vercel.com).
Database: Neon Inc.
Image and document storage: Cloudflare R2; contact-form spam protection: Cloudflare Turnstile (Cloudflare, Inc.).
Authentication: GitHub (GitHub, Inc.).
AI features: Anthropic, PBC (Claude API). Under its commercial terms, Anthropic does not use data sent through its API to train its models.
Email delivery (new contact message notifications, product feedback): Resend.
Some providers are located outside the EU (notably the USA). Transfers are covered by appropriate safeguards (standard contractual clauses).
Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability.
To exercise them: thibaultfayard.pro@gmail.com. On request, you receive a copy of your data. Your résumé can also be downloaded as a PDF at any time from the app.
You may lodge a complaint with the French DPA, the CNIL (www.cnil.fr).
Cookies
emblem.run uses only strictly necessary cookies (session, preferences). No advertising or third-party tracking cookies. See the Cookie Policy for details.