This notice explains what this website collects, why, who else sees it and how to ask me to change or delete it. I am Mohamed Laraiche, and I run this site.
The brief form
When you send a brief, I store what you type so I can read it and reply. The form asks for:
- your name, email address, company and role
- a description of the process, the tools you use and the outcome you want
- the page or segment you came from and the campaign tags in the link you followed (utm_source and similar)
- how often the process runs and when you want it done
- the time you ticked the consent box and the version of the wording you agreed to
How I use a brief
I use a brief only to answer you and to decide whether I can help. I do not sell it and I do not use it for marketing to other people. I keep a brief for 12 months, then delete it unless we are working together.
To limit repeat submissions, the site stores a keyed hash of your network address with the brief (for an IPv6 address, of its first half, so nearby addresses share one value), made with a secret key. It is not your address in plain form, but I do not claim it can never be linked back to it. I use it to count how many briefs came from one place in an hour. It is kept with the brief for 12 months. The form marks which answers are required; the others are optional.
The legal basis is your consent, given by ticking the box on the form. You can withdraw it at any time.
Visit counts on this site
The site records a small number of events when you use it: the first page you open in a visit, starting a brief, sending a brief and clicking the booking link. Each event holds only a fixed event name, the page path, a short tag for the segment page you came from, the campaign tags in the link you followed (such as utm_source) and a timestamp. It holds no name, email address or network address, and these events set no cookie.
These events do not wait for a consent choice, because they contain no personal data. I use them to see which pages lead to briefs. I keep them for 12 months. The legal basis is my legitimate interest in knowing whether the site works.
How long I keep things
| Data | Why I keep it | How long |
|---|---|---|
| A brief, with the hashed network address | To answer you and decide whether I can help | 12 months, then deleted unless we are working together |
| Site events (page path, event name, campaign tags, time) | To see which pages lead to briefs | 12 months |
| Your analytics choice | To remember your banner answer | In your browser until you clear site data |
| Google Analytics data (only if you accept) | To count visits and the links that bring people here | Held by Google under the retention setting of my analytics account |
Google Analytics
If you accept analytics in the banner, the site loads Google Analytics 4 and sends it page views and the same events described above. Google receives the page address with the query reduced to the campaign tags (utm_source, utm_medium, utm_campaign, utm_content and ref) and no fragment, plus the origin of the site you came from. Google Analytics sets cookies in your browser and receives your network address and browser details, as it does on any site that uses it. If you decline, nothing is sent to Google and the Google script is not loaded.
Your choice is saved in your browser, in local storage, under the name funnel-consent. It is not sent to my server. You can change it by clearing site data in your browser. The campaign tags from the link you followed, and a marker that records that this visit was already counted, are kept in session storage until you close the tab.
Who else handles your data
I use these services to run the site. They process data for me:
- Vercel hosts the site and sees ordinary request data such as your network address and browser. The site does not load Vercel Analytics or Speed Insights.
- Images on some pages are loaded from Unsplash and from Supabase storage, which see your network address when the image is requested.
- Supabase stores briefs and events in a database in Frankfurt, Germany (European Union).
- Cal.com handles bookings if you follow the booking link. Its own privacy notice applies from that point.
- Google receives analytics data only if you accept analytics.
Your choices
You can ask me to show you what I hold about you, correct it, delete it or stop using it. You can also withdraw your consent at any time. Write to hello@molaraiche.com and I will answer within 30 days. If you are not happy with my answer, you can complain to the data protection authority, which in Morocco is the CNDP.
Changes to this notice
If I change how the site handles data, I will update this page and the date at the top.