Privacy policy

This site sets no tracking cookies and has no banner for you to accept. It measures its traffic anonymously and without cookies, and only collects data that identifies you if you choose to contact us.

Updated October 3, 2026 · Translated from the French original, which prevails
01

Data controller

The controller of the data collected on melei.studio is Théo Sabaté, sole proprietor, 34 avenue Jean Jaurès, 65800 Aureilhan, France, SIREN 851 054 759, who can be reached at contact@melei.studio.

Meleï Studio is a collective of independent professionals, with no legal entity. Data you entrust to us for a project may be shared with the members of the collective working on it, each of whom commits to processing it in line with this policy. Details are in our legal notice.

02

What we collect, and why

You can browse the entire site without telling us who you are. We process data in five cases.

WhenWhat dataWhyLegal basis
You fill out the form on the contact page Name, email address, company, current website, need, budget, message, and your file if you attach onePlus, to limit abuse, a one-way hash of your IP address that cannot be used to recover it, and your browser type To review your project, reply to you, and, where applicable, manage the relationship that follows Pre-contractual steps taken at your request
You book a call on the contact page Name, email address, time zone, chosen time slot, and anything you write in the notes fieldEntered in the Cal.com calendar embedded in the page To schedule the meeting, send you the confirmation and video call link, and prepare for the call Pre-contractual steps taken at your request
You email us at contact@melei.studio Your email address, your name if you provide it, and the content of your message To reply to you and, where applicable, manage the relationship that follows Legitimate interest in replying to people who contact us
You view a page IP address, requested page, browser, timestampThe host’s technical logs, never used to track individuals To serve pages and keep the site secure and available Legitimate interest in operating the site
You browse the site Page viewed and its title, referring page, language, device type, country, time spent and scroll depth, clicks on the main buttons and on links to other sites, form submission without its contentYour IP address and browser are only used to recognize a visit for one day, through an anonymous fingerprint; neither is stored To measure the site’s traffic and improve it, as anonymous statistics Legitimate interest in measuring the site’s audience, exempt from consent under the CNIL’s rules

We don’t do automated outreach or profiling, and we never sell your data. No data is used for advertising.

03

Processors and transfers

Five service providers process data on our behalf. Four are based in the United States, so your data may be transferred there, with the safeguards described below.

Cal.com, Inc.

2261 Market Street #4382, San Francisco, CA 94114, United States. Provides the booking calendar embedded in the contact page; the data you enter there is processed on its servers in the United States. Cal.com has appointed a data protection officer (legal@cal.com) and a representative in the European Union (legal+eu@cal.com), and commits to transferring data only with appropriate safeguards. See its privacy policy.

Vercel Inc.

440 N Barranca Avenue #4133, Covina, CA 91723, United States. Hosts and serves the site, as well as our internal tools: the one that receives the requests sent through the form and their attached files, and Meleï Analyze, our audience measurement tool. Also keeps the technical logs mentioned above. Vercel participates in the EU-U.S. Data Privacy Framework, which covers transfers of personal data from the European Union to the United States. See its privacy policy.

Neon, LLC

A Databricks company, based in the United States. Hosts the databases of our internal tools, where requests sent through the form and traffic statistics are stored. These databases are located in the European Union, in Frankfurt. Neon participates in the EU-U.S. Data Privacy Framework. See its privacy policy.

Plus Five Five, Inc. (Resend)

2261 Market Street #5039, San Francisco, CA 94114, United States. Sends the email that notifies us of a new request, including its content; this email passes through its servers in the United States. Resend participates in the EU-U.S. Data Privacy Framework and applies the European Commission’s Standard Contractual Clauses. See its privacy policy.

Google Ireland Limited

Gordon House, Barrow Street, Dublin 4, Ireland. Provides our business email, Google Workspace: messages you send to contact@melei.studio are received and stored there. Google participates in the EU-U.S. Data Privacy Framework for processing that passes through its US infrastructure. See its privacy policy.

04

Retention periods

  • Contact requests and bookings, including attached files: three years after our last exchange, if no collaboration followed.
  • Project-related data: the length of the project, then as long as the law requires us to keep business and accounting records, which is ten years for accounting documents.
  • Traffic statistics: 13 months, then automatic deletion.
  • The host’s technical logs: the short period set by Vercel for its request logs.
05

Cookies and trackers

The site includes no advertising pixels and no third-party measurement tools. It sets only one cookie, melei_lang, and only if you choose a language, in the footer or in the banner offering the French version: it remembers that choice for one year so we can show you the right version, and is used for nothing else.

When you arrive, if you haven’t made a choice, the language set in your browser decides which version you see, French or English. This setting is read on the fly and not stored.

To understand which pages are visited and improve the site, we measure its traffic with Meleï Analyze, our own tool, without cookies. It stores neither your IP address nor your browser details: a visit is recognized for one day only, through an anonymous fingerprint that cannot follow you from one day to the next or from one site to another. Measurement is used solely to produce statistics, which are never combined with any other data, and raw data is deleted after 13 months.

Both the language cookie and this audience measurement meet the conditions set by the CNIL, the French data protection authority, for exemption from consent, which is why the site shows no consent banner. You can opt out of measurement: opt out of audience measurement. Your browser remembers this choice. Measurement is also turned off automatically if your browser sends the Global Privacy Control signal.

The calendar on the contact page is displayed in a frame loaded from app.cal.com. This frame is operated by Cal.com, which may use its own session, preference, or security cookies in it to make booking work. We do not control them; their list and purpose are set out in Cal.com’s privacy policy. You can book without using this calendar by writing to us directly.

Links to LinkedIn and to our clients’ sites are plain links: no script from those sites is loaded on ours.

06

Your rights

Under the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés), you have the following rights over your data:

  • access: get a copy of the data we hold about you;
  • rectification: have it corrected if it is inaccurate;
  • erasure: have it deleted, within the limits of our legal obligations;
  • objection and restriction: ask us to stop or restrict processing based on our legitimate interest;
  • portability: receive the data you provided to us in a structured, machine-readable format;
  • post-mortem instructions: decide what happens to your data after your death.

To exercise them, write to contact@melei.studio from the email address concerned, or by mail to the controller’s address. We reply within one month. If there is any doubt about your identity, we may ask you for proof of identity.

07

Complaints

If you believe your rights have not been respected, you can file a complaint with the French data protection authority, the Commission nationale de l’informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or online at cnil.fr. We would rather you write to us first: most questions are settled in a single exchange.

08

Changes

This policy may change, for example if we add a new service provider. The date at the top of the page shows the latest version. Significant changes will be announced on this page before they take effect.