Privacy Policy

Effective Date: July 23, 2026

1. Introduction

Welcome to Gridiron Science ("we," "our," "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you visit gridiron-science.com, in compliance with the General Data Protection Regulation (GDPR) and the CNIL guidelines.

2. Identity of the Data Controller

The Data Controller responsible for processing your personal data is:

• Pierre Samson
• pierresamson@brainsurfing.tech

3. Data We Collect & Purpose

We collect and process the following categories of data:

A. Analytics & Performance Data

• What we collect: page views (the page you visit), device and browser signals (browser, operating system, screen size, language), approximate geographic region (country/region), a pseudonymous client identifier used to count unique visits, and session/engagement signals (referrer, session duration). We do not collect personally identifiable information (PII) such as your name or email — the site has no user accounts or logins.
• Purpose: To understand how our website is used and to improve the user experience.
• Tools used: Google Analytics 4 (GA4).
• Method: First-party measurement via our own server-side container at sgtm.gridiron-science.com (analytics cookies are set as first-party cookies on gridiron-science.com; your IP address is used only to derive coarse region and is not stored by GA4). Measurement is governed by Google Consent Mode v2 and is denied by default — no analytics cookies are set and no measurement is sent until you grant consent via our banner.
• Legal Basis: Your explicit consent (Article 6(1)(a) GDPR).

B. Technical & Essential Data

• What we collect: Server logs and IP addresses (temporarily, for security).
• Purpose: To ensure the security, stability, and proper functioning of our website.
• Legal Basis: Legitimate interest (Article 6(1)(f) GDPR).

4. Cookies and Tracking Technologies

We use cookies to collect and store information.

• Essential Cookies: Strictly necessary for the website to function — including a cookie that stores your consent choice so we can remember it. Cannot be disabled.
• Analytics Cookies: First-party GA4 cookies, set only if you grant explicit consent via our consent banner. We use no third-party advertising cookies.

You can modify your consent preferences at any time using the button below (also available in the site footer):

5. Data Retention

• Consent Choices: Retained for a maximum of 6 months (180 days) per CNIL recommendations.
• Analytics Data: Retained for 2 months before automatic deletion.

6. Your Rights Under GDPR

As a resident of the European Economic Area (EEA), you have the following rights regarding your data:

• Right to Access: Request a copy of your data.
• Right to Rectification: Correct inaccurate data.
• Right to Erasure: Request deletion of your data ("Right to be forgotten").
• Right to Withdraw Consent: You may withdraw your consent for non-essential tracking at any time (via the "Manage Privacy" control above).

To exercise any of these rights, please contact us at pierresamson@brainsurfing.tech. You also have the right to lodge a complaint with the CNIL (www.cnil.fr).

7. Hosting & Third-Party Processors

Our website and data are hosted by:

OVH

Third-party processor: Google (Google Analytics 4 / Google Tag Manager) processes measurement data on our behalf. The Google tag library is loaded from Google's CDN; measurement is forwarded to GA4 through our first-party server container.

8. Updates to this Policy

We may update this Privacy Policy from time to time. The "Effective Date" at the top reflects the latest revision.