Privacy
The course records as little as possible. Here is exactly what, where, why and for how long. Version of 7 November 2026.
Who is responsible for your data
Maxime Toulemonde, sole proprietorship (entrepreneur individuel, EI), SIREN 938 972 767, 1114 Chemin du Bihamel, 59118 Wambrechies, France. For any question or request: contact@maximetoulemonde.com.
Without an account: your progress stays in your browser
Without an account, your progress is never sent to the site. Your browser keeps it on your device, along with your settings:
fia:progression:v1: the lessons you have ticked (and the day), your path, the state of your exercises, your quiz results (including the day of your first error-free pass and, at most, two revision days), and the last lesson opened (saved as soon as you open a lesson, for the "Pick up where I left off" button);fia:regularite:v1: the days you worked on the course (a lesson ticked, a quiz finished, an exercise started or finished, or 3 minutes spent on a lesson, tab visible), to show your week in My space; dates only, 120 days at most;fia:recompenses-vues:v1: the milestones already celebrated and their date, so as not to show them to you twice;fia:preferences:v1: your choice to show or hide your regularity;fia:systeme: the Mac or Windows tab, if you chose it;fia:langue: the language you chose with the language selector (FR, EN, ES), if you used it; if it is English or Spanish, the French home page takes you to the home page in that language;fia:diagnostic:v1: the starting point recommended by the starting test, its date and, if you answered it, your opinion on the level of the first lesson you then followed; it is only used to suggest an adjustment;fia:avis:v1: the date on which you gave your feedback on the course, and how many times it was suggested to you, so that you are not asked again;fia:jeu:v1andfia:exos:v1: your daily goal, your challenges, your exercise sets (stars, results, exercises to review) and the badges already celebrated, to show your level, streak, reviews and badges; this data stays in this browser, nothing is sent to your account;marque-pages-empruntsandmarque-pages-emprunts-exercice: the loans you enter in the two exercise notebooks of module 12 of the French version, if you open them from the site;marque-pages-emprunts-enandmarque-pages-emprunts-exercice-en: the same for the two notebooks of the English version;marque-pages-emprunts-esandmarque-pages-emprunts-exercice-es: the same for those of the Spanish version. Each notebook keeps its loans separate.
Your points are not stored separately: they are recalculated from your progress. This information does not leave your device and nobody has remote access to it. It stays until you erase it. "Erase everything on this browser", in My space, erases your progress, your regularity, the milestones already celebrated, your preferences, your recommended starting point, the record of your feedback and the game data (challenges, exercise sets, badges). The Mac or Windows tab, the chosen language and the notebooks' loans remain: to erase them all, clear the site's data in your browser (in a notebook, you can also delete a loan with its "Delete" button). The site uses no cookies.
What still goes through a server, even without an account:
- the technical requests needed to load pages and files (IP address, page requested, browser), recorded in the host's logs: see What the hosts see;
- the requests of the Claude Code companion, if you use it: see The Claude Code companion;
- your message, if you write to the contact address: see When you write to us;
- your answers, if you send the "Give my feedback" questionnaire: see Your feedback on the course.
No other function of the course sends data without an account.
With an account (optional)
- What is recorded: your first name, your last name, your email address, your password in the form of a hash (nobody can read it back), the language of the page where you created your account (French, English or Spanish), the dates of creation, confirmation and login, and your progress (lessons checked and their day, path, state of the exercises, quiz results with the pass and revision dates, last lesson opened), with the date and time of each exercise, of the last attempt at each quiz and of the last lesson opened, and the date of the last change. Not your answers to the exercises. For each open login session, Supabase also keeps the IP address and the browser used, until that session is logged out or the account is deleted.
- What never goes there: your regularity, the milestones already celebrated and your preferences stay on the device where they were created. Each device therefore has its own regularity week.
- On your device: once you are logged in,
fia:sessionkeeps your login session (login tokens, email address, first name, last name and language of the account) so that you stay logged in. "Erase everything on this browser" closes this session; your progress recorded on the server stays on the account. - Why: to restore your progress on all your devices, to send you the confirmation email and, if you ask for it, a link to change your password.
- Legal basis: the contract formed by the terms of use, accepted when the account is created (GDPR, article 6(1)(b)).
- For how long: as long as your account exists. You delete it whenever you want, immediately, from My space; your progress on the server goes with it. An account unused for 2 years (no login or synchronisation) is deleted along with its progress: you receive an email 30 days before, and logging in is enough to keep it. What is kept in your browser is not touched.
- Who has access: you; Maxime Toulemonde for technical maintenance; the providers below, each for its part. No resale, no advertising, no newsletter.
Account emails
The confirmation and forgotten password messages are sent from formation@maximetoulemonde.com through the Resend service. Resend receives your email address and the content of the message, and keeps a history of sends for 30 days. For now these emails are in French, even for an account created from the English or Spanish version: the language recorded with the account is kept so that they can later be sent in that language. Legal basis: the contract (the terms of use).
When you write to us
Your message to contact@maximetoulemonde.com goes through the ImprovMX forwarding service, then arrives in Maxime's Gmail inbox (Google). His replies are sent through the Resend service. Your message is used only to reply to you. Legal basis: the legitimate interest in answering the messages received. Duration: the length of the exchange, then one year at most.
Your feedback on the course (optional)
The "Give my feedback" questionnaire asks for no account, no name and no email address, and nothing links your answers to an account. What is recorded: your answers to the ten questions, your comment if you write one, the language of the questionnaire, the date and time of sending and, if you took the starting test in this browser, the recommended starting point and your opinion on the level of the first lesson. Why: to know what works and what gets in the way, in order to improve the course. Where: the course's Supabase database, in Ireland; only Maxime can read the answers. This feedback is not perfectly anonymous: with few answers, the date, the language or a comment may make it possible to guess who answered. So do not write your name or any personal information in the comment; if it contains some, Maxime deletes it when he notices it. Like any visit, sending goes through the host's technical logs (including the IP address, see What the hosts see); the IP address is not recorded with your feedback. To limit abuse, the server counts, in memory only and for 10 minutes, the submissions coming from the same address. Legal basis: the legitimate interest in improving the course, with an optional questionnaire that asks for no identity. Duration: 12 months; an automatic task runs every night and deletes feedback older than 12 months, so at most one day after that point. Your rights: as the feedback does not carry your name, write to contact@maximetoulemonde.com giving the approximate date and what you wrote; the feedback will be looked for and, if found, deleted.
What the hosts see
As with any website, the host Vercel records technical logs of each visit: IP address, page requested, browser, city and country deduced from the IP address. Its firewall also examines each visit to spot attacks and bots, based on the same information and on technical signals of the connection (network of origin, encryption fingerprint). These logs serve the operation and security of the site. Legal basis: the legitimate interest in operating and protecting the site. Duration: these logs can be consulted for 1 day in the course's Vercel space; Vercel does not publish a duration for its own archives and states that it keeps them for as long as necessary. With an account, Supabase also keeps technical logs (including the IP address): 1 day, and 1 hour for the login log.
The typefaces are served by the site itself: no data is sent to Google or to any other font provider. There is no advertising cookie and no social network button. To know how many people visit the site, it uses Vercel Web Analytics: an anonymous, aggregate count of visits (pages viewed, country, device type, referring site), with no cookie and no data that could identify you.
The Claude Code companion
When you use it, the course server receives the identifier of the lesson or resource requested, the words of a search in the course, the list of lessons completed if you provide it, and the technical information of any request (IP address, software used). It receives neither your files nor your name, and keeps nothing other than the host's technical logs. What you write in Claude Code is processed by Anthropic, according to your settings with them (see the lesson "Your data: what is sent, what stays, the settings" in module 1).
The providers and the countries
| Provider | Role | Where | Safeguard outside the European Union |
|---|---|---|---|
| Vercel Inc. (United States) | Hosting of the site and its functions | Pages served from Europe; functions run in the United States (Washington) | EU-US Data Privacy Framework, to which Vercel states that it adheres; standard contractual clauses in its data processing agreement |
| Supabase Pte. Ltd. (Singapore) | Database, account login and feedback on the course | Database, login and backups in Ireland; support and operating logs partly processed outside the Union | Standard contractual clauses of the European Commission, provided for in its data processing agreement |
| Resend (Plus Five Five, Inc., United States) | Sending account emails and replies to messages | Sent from Ireland; history and logs in the United States | EU-US framework, which Resend announces; standard contractual clauses in its data processing agreement |
| ImprovMX Incorporated (United States) | Forwarding of emails sent to the contact address | Received in France; forwarding partly from the United States; logs kept for 7 days | ImprovMX is not on the EU-US Data Privacy Framework list. It states that it provides the European Commission's standard contractual clauses in a data processing agreement reserved for its paying customers. The safeguard that applies to this transfer is being verified. |
| Google LLC (United States) | Gmail inbox where the messages arrive | Google data centres, including in the United States | EU-US framework, to which Google LLC states that it adheres |
Your rights
You can request access to your data, its correction, its erasure, the restriction of its use, its portability, and object to processing based on legitimate interest. You can also give directions about what happens to your data after your death (article 85 of the French Data Protection Act, the "Informatique et Libertés" law). In My space, you can already download your progress ("Download my progress"), erase it from your browser, and delete your account. For anything else, write to contact@maximetoulemonde.com: the reply comes within one month at most.
If you believe your data is not being handled correctly, you can lodge a complaint with the CNIL (Commission nationale de l'informatique et des libertés, the French data protection authority), online at cnil.fr or by post: Commission nationale de l'informatique et des libertés, Service des plaintes, 3 Place de Fontenoy, 75007 Paris.
Age
Creating an account is reserved for people aged 15 and over. The course can be followed without an account, at any age.
Security
Encrypted connection (HTTPS), password kept in the form of a hash, access rules that prevent one account from reading another's progress, an administration key used only on the server side to delete accounts.
Changes
If this page changes, the date at the top is updated. An important change is announced on the site and by email to account holders.