Privacy

Last updated: 7 October 2026.

Who processes your information?

KHALIL GARDOUH, a sole trader operating as Popoto, 129 esplanade de l’Ortet, 34430 Saint-Jean-de-Védas, France, is the data controller. You can contact him through the website form.

The contact form

We collect your name, email address, project type, message and, if supplied, company name. We use this information to reply to your enquiry, discuss your project and prepare a possible proposal. The enquiry is also available in Popoto's private messaging area, accessible from the Android app, to follow your project. Form enquiries are answered by email.

Fields marked with an asterisk are required to process your enquiry. Others are optional. The legal basis is taking pre-contractual steps at your request, under Article 6(1)(b) GDPR.

Online chat

Chat lets you talk with Popoto. Replies are written by Khalil Gardouh and appear in your conversation. Popoto manually chooses the “Online” or “Away” status. Your email is required when Popoto is away and optional when online; it lets us reply after you leave the website.

We collect your message text, email if supplied, a conversation ID, exchange dates and technical information needed to process them. They are used to answer questions and prepare your project, as pre-contractual steps at your request. Khalil Gardouh can access them in his private inbox, as can technical providers needed for hosting. Messages with an email address may also trigger an email notification.

Conversations on our server are deleted seven days after the last message, during an hourly cleanup. Technical copies of email notifications are deleted after seven days. Email exchanges with no follow-up are manually deleted seven days after the last exchange. Documents needed for a service may be kept according to obligations related to that relationship.

Email delivery and storage may involve Google for the recipient Gmail inbox and the sending provider, under their applicable data transfer safeguards. Your details are not used to subscribe you to a newsletter.

Phone and video appointments

You can suggest a time to present your project by phone or video. We collect your name, email, the number needed for a call, chosen mode, preferred date and time, optional note and the presentation page you came from. Popoto must confirm the request: suggested slots are not guaranteed availability.

Khalil Gardouh can access this information in his private calendar, including through the Android app, as can providers needed for hosting and sending confirmations. It is used to prepare your project as pre-contractual steps at your request. Confirmation, rescheduling and cancellation are sent to the supplied email. Request content and appointment details are not added to audience analytics.

Requests, their follow-up and associated notifications are deleted from the server 365 days after receipt, at the next maintenance run. For video calls, Popoto may add a meeting link to the confirmation. When you open it, the video service processes necessary data under its own terms; no conference is opened automatically on our website.

Private messaging notifications

The owner may enable Web Push notifications in his inbox, in a browser or the Android app. The server then stores the subscription endpoint, encryption keys and its operator session association. Standard browser notification services, including Google, Apple, Mozilla or Microsoft depending on the browser, deliver these notifications.

Notifications contain a generic announcement and conversation or appointment identifiers to open the right item. They contain neither your message text nor your email address. Subscriptions are limited to the operator session, a maximum of thirty days, and deleted on logout. Pending notifications expire after one hour.

Form recipients and retention

Enquiries are accessible to Khalil Gardouh and technical providers needed for hosting and email delivery. They are not sold or used to subscribe you to a newsletter.

Form enquiries stored on the server, including in private messaging accessible through Android, are deleted 365 days after receipt. Emails about enquiries with no follow-up are kept for 12 months after the last exchange. Where an enquiry leads to a service, documents needed for the contractual relationship are retained under applicable obligations.

Enquiries are hosted on the website's VPS. Notifications go to a Gmail inbox; email delivery and storage may involve Google and the sending provider under their applicable transfer safeguards.

Internal audience measurement

We use internal counters to understand interest in our two presentation pages and improve the site: page views, clicks towards offers and contact, starting a form, opening chat and estimated visible time. Sources are grouped into fixed categories such as Google, Facebook, internal navigation or direct access; devices are classified as phone, tablet or computer.

Counters are aggregated daily in Paris time and kept on our VPS for up to 365 days. They contain no persistent visitor ID, raw IP address, name, email or message text. The previous page's origin and a recognised campaign source may determine a category; full URLs, parameters and unrecognised domains are not stored in statistics. Separate, optional Google Analytics measurement is described below and requires your consent.

To understand the geographical areas where pages are viewed, the server temporarily uses the connection's network address with a geographical database installed on our VPS. No IP address is sent to an external geolocation service. Only daily counts by estimated country, region or city and masked network are stored, for up to 90 days. IPv4 addresses are reduced to their first two numbers, e.g. 8.8.*.*; IPv6 to their first three groups, a 48-bit prefix. The rest is erased before statistical storage.

Network location is approximate: it gives neither GPS location nor a precise address and may correspond to your operator, VPN or proxy. It is not matched with your forms or chats. Geographical data comes from DB-IP. This measurement follows the same opt-out choice as other navigation measurements.

The server also counts received forms, created conversations, messages and first reply times. Only counts, durations and predefined categories are added to statistics; private request and chat content stays separate. The dashboard is accessible only to the owner logged into private messaging.

These measurements count events, not unique visitors: one person may generate several views or enquiries. Visible time is an estimate, not proof of reading. Statistical stages compare overall counters and do not reconstruct your individual journey.

You can disable navigation measurement in this browser below. This choice is saved locally without a visitor ID until you change it or clear site storage. Browser Do Not Track and Global Privacy Control signals are also respected. Opting out does not block forms or chat; aggregated counts of received enquiries and conversations continue on the server.

Disable audience measurement

Measurements are aggregated only, with no visitor ID.

Cookies and security

The website uses a temporary technical cookie to protect forms and appointment requests, expiring after two hours. Opening chat sets another technical cookie linking your browser to a session for two hours. Private messaging uses an operator cookie valid for up to thirty days. Chat and operator cookies cannot be read by browser scripts (HttpOnly), are restricted to the site (SameSite=Strict) and sent only over HTTPS in production.

Temporary identifiers and your reply email, if supplied, are also saved in tab storage to restore your chat when changing pages; they stop giving session access after two hours and disappear when the tab closes. Optional advertising measurement, described below, is separate from internal audience measurement and stays disabled without consent. Your light or dark mode choice is saved only in your browser to remember it on later visits.

The website language is selected from your browser language. Your manual choice is saved in your browser until you change it or clear site storage. No external translation service receives your data.

A temporary IP fingerprint may limit abusive submissions. Form and appointment fingerprints are deleted after 30 minutes; expired chat counters are removed during hourly maintenance. To protect audience measurement events, an IP HMAC fingerprint and temporary counter are held only in memory for a 15-minute window; expired counters are removed at the next maintenance run. They are not added to statistics. This protection relies on the legitimate interest of securing the service. Any hosting technical logs support site operation and security.

Geographical results may also be reused for ten minutes in an in-memory cache limited to 256 entries and indexed by a temporary HMAC fingerprint. This cache is not written to disk and creates no visitor identifier in statistics.

Google Analytics 4 — with your consent

With consent, Google Analytics measures visits to Popoto's public pages, traffic sources, recognised campaigns, devices, estimated countries and successfully recorded enquiries (contact, appointment or first chat). No Analytics tag is installed on private messaging or app download pages.

The legal basis is your consent. “Cookies and analytics” lets you accept or reject Google Analytics and Google Ads separately. Earlier Google Ads consent does not enable Analytics. Refusing leaves all services available. Browser opt-out signals disable these measurements.

Google may receive a public page URL, previous page origin, advertising click identifiers, recognised campaign parameters and connection details (including the IP address, processed by Google to estimate location). Free-form parameters, URL fragments, names, emails, phone numbers and form or chat content are not added to events. Automatic enhanced measurement, Google Signals and advertising personalisation are disabled.

Analytics cookies _ga and _ga_… distinguish browsers that accepted measurement. They last up to 180 days without automatic extension. Your choice is also saved for 180 days. Withdrawal stops future measurement and deletes domain Google cookies as far as your browser allows; it does not retrospectively delete data already received. Individual event data is retained in GA4 for the property's configured two-month period; Google may retain aggregated reports longer.

Aggregated reports are accessible to the owner in his private app. The server reads them with access limited to the Popoto property and caches them in memory for fifteen minutes. Google Ireland Limited and its providers may process data, including outside the EEA, under Google's applicable safeguards. See how Google uses information.

Google Ads advertising measurement

The website has an optional system to measure quote and appointment requests from Popoto's Google Ads. “Cookies and analytics” shows its status and lets you change your choice. Chat enquiry measurement is not enabled.

When available, no script or call to Google Ads runs before explicit consent. You can accept or reject with equal options and no effect on forms, appointments or chat. Requests recorded before consent are not sent to Google Ads later.

With consent, Google may receive the conversion type (recorded quote or appointment request), a hashed technical ID to prevent duplicates, the page URL without free-form parameters and, if present in the ad link, its click identifier. The previous page origin may also be sent. No name, email, phone, message or appointment details are added. Connecting to Google also transmits standard network information, including IP address and browser details.

Google Ads may use measurement cookies, including names beginning with _gcl_, to link an enquiry to an advertising click. Advertising personalisation stays disabled. Google Analytics is a separate choice. Google Ireland Limited and its providers may process data, including outside the EEA, under Google's safeguards and terms. Read how Google uses information and its cookie information.

Your accept or reject choice is saved in your browser for 180 days without a visitor ID. You can withdraw it anytime using the button below or in the footer. Withdrawal blocks future conversions and deletes this domain's advertising cookies as far as your browser allows. It cannot retrospectively delete data already received by Google. Global Privacy Control and Do Not Track signals keep this tracking disabled.

Manage cookies and analytics

Microsoft Ads advertising measurement

Popoto's Microsoft Ads UET tag measures successfully recorded form, appointment and chat enquiries. It loads only after explicit Microsoft Ads consent. Earlier Google Ads or Analytics consent does not authorise it. Each service can be chosen separately in “Cookies and analytics”, without affecting website services.

With consent, Microsoft receives a generate_leadevent, the “lead” category and “contact”, “appointment” or “chat” channel. Preview tests and unrecorded requests are not sent. Duplicates are filtered locally. No name, phone, email, form or message text, raw request ID or invented amount is added.

The reported page is limited to a public Popoto page; only a Microsoft click ID msclkid in a valid format may be kept for attribution. Other parameters, fragments and the referrer are excluded. Connecting to Microsoft transmits standard network information, including IP and browser details. UET may use the cookies _uetsid, _uetvid and _uetmsclkid, and their local backups. Clarity, session recordings and automatic page change tracking stay disabled.

The Microsoft choice is stored separately for 180 days. Refusal, withdrawal, Global Privacy Control and Do Not Track block new events. Withdrawal removes accessible UET cookies and local backups on this domain; it does not retrospectively delete Microsoft's received data. Read the Microsoft privacy statement, including processing and transfers outside the EEA.

Your rights

Depending on your situation, you can request access, rectification, erasure, restriction or portability of your data. You can object to processing based on legitimate interest. Send your request through the contact form, mentioning “Personal data” in the message, or by post to the data controller's address.

You can also lodge a complaint with the CNIL.