Privacy policy

Updated September 27, 2026

This page covers the website, the waitlist and book orders. Your sessions stay on your Mac: opuscule Studio puts your book together on your machine, and only the PDF you approved goes to the printer.

On the website

Anonymous analytics (Vercel Web Analytics, and Umami, an open-source tool we host ourselves in Europe) count page views, referrers, countries, device and browser types. They set no cookies, keep no IP address and keep no identifier for more than a day. Vercel, which hosts the site, also keeps technical request logs (IP address, date, page requested) for security and operations, for a limited time.

The waitlist

Only if you sign up: your email address, the language of the page you signed up from, and the status of your sign-up (pending, confirmed, unsubscribed) with its dates.

Why: to let you know when Opuscule launches and send you this week's volume every Monday. The legal basis is your consent (Article 6(1)(a) GDPR), given when you sign up and confirmed through the link sent by email. Without that click, you get nothing beyond the confirmation email.

How long: as long as you stay subscribed. If you unsubscribe, or never confirm your sign-up, your address is deleted on request, and at the latest when the list is cleaned, at least once a quarter.

Orders

When you order a book: your name, delivery address, phone number (required by the carrier), email, and the order itself (page count, interior, price, printing and shipping status).

Why: to make, deliver and track your book, and to handle any complaint. The legal basis is performance of the contract (Article 6(1)(b) GDPR), plus our accounting obligations for payments (Article 6(1)(c)).

Opuscule doesn't keep your book's content: the PDF goes through encrypted temporary storage and is deleted as soon as the printer has fetched it, and after 24 hours at the latest.

How long: the order record is deleted automatically about 13 months after the order. Accounting records for the payment are kept for 10 years, as the law requires.

Who has access

• The publisher of the site, who also sells the books (see the legal notice). Your data is never sold or rented.
• Resend, which stores the waitlist and sends the emails on the publisher's behalf. Resend is based in the United States: this transfer relies on the safeguards in its data processing agreement (DPA).
• Vercel, which hosts the site and the analytics (Vercel Web Analytics and our own Umami instance, in Europe).
• Neon, which stores the Umami analytics database in Europe.
• Stripe, which processes the payment. Opuscule never sees or stores your card details.
• Cloudflare, which hosts the order server and the temporary PDF storage, under a data processing agreement.
• Lulu Press, Inc., our printer, which receives your name, address, phone number, email and the PDF to make and ship the book. Lulu is based in the United States: this transfer is necessary to fulfil your order (Article 49(1)(b) GDPR).

Your rights

You can access your data at any time, have it corrected or erased, object to its processing, ask for it to be restricted or ported, and withdraw your consent. Every waitlist email has a one-click unsubscribe link. For anything else: meffysto@gmail.com.

If you believe your rights aren't respected, you can complain to the French data protection authority, the CNIL, or your local authority.

Cookies

The site sets no cookies and stores nothing in your browser. Fonts and the analytics script are served by the site itself.