Legal notice
& personal data

Site publisher

Director of publication

Nicolas Lion

Status

Micro-entrepreneur (French sole trader)

SIRET

983 367 780 00019

Activity code

62.01Z — Computer programming

VAT

Not applicable, Article 293 B of the French tax code

Email

contact@nlion.fr

Telephone

06 95 38 15 89

Website

www.nlion.fr

Hosting

This site is not hosted by a commercial provider. It is served from a personal server administered by Nicolas Lion, located in France. Host and publisher are therefore one and the same person, reachable at the details above.

What this site is for

This site presents a documentary project in development about the life of Jean Tolstoy. It is a family and historical investigation carried out by Kévin, Sylvain and Nicolas. Nothing is sold here; no payment is taken.

No cookies, and an in-house visitor count

This site sets no cookie on your device. Not one, not even a technical one: the contact form and the visitor count were both designed without sessions in order to do without them entirely. Nothing here follows you from one site to the next, and nothing feeds advertising.

One cookie does exist on this site, and it cannot concern you: from the password-protected dashboard, the publisher can set one on their own browser so that their browsing is not counted — reading your own pages would skew figures as modest as these. It holds nothing but a “1”, it is never set on a visitor’s browser, and it exists to measure less, not more.

One clarification, for honesty’s sake: this site shares its domain name with other work by the same author, each with its own policy. A cookie set by one of them stays visible from these pages — it was not set here, and nothing here reads it.

This site uses no external statistics service — no Google Analytics, no Matomo, no equivalent. No ad network, no tracking pixel, no social media button. Traffic is measured by an application written in-house, described in point 4 below. No browsing data is passed to a third party, nothing is sold on, and your browsing is never matched up with other sites.

One exception, set out in full in point 4: to establish the country of a visit, your browser asks a public geolocation service, which sees your IP address at that moment. The call leaves your machine, and tells that service nothing about the page you are reading, the site you came from, or anything else. It does store the country code it finds in your browser’s memory (not a cookie), so the call need not be made again on every page. You can clear it along with the rest of your browsing data.

What this site actually handles

For the sake of accuracy, here is the complete list — there is nothing else.

1. The support form

The only data collected is what you type in yourself: name, email address, subject and message. It is used solely to reply to you.

• Your message is emailed to the project’s mailbox (jean@nlion.fr) and, in copy, to the three members of the team leading the investigation.
• A copy is kept on the server, for the sole purpose of losing no message should the mail service fail.
• This data is never handed over, sold or passed on to a third party, for any purpose whatsoever.
• No newsletter sign-up, no marketing of any kind.

2. A technical anti-spam fingerprint

To prevent automated bulk sending, the server keeps an encrypted fingerprint of the IP address a message was sent from. It cannot be reversed — your IP address is never stored in the clear — and it is erased after one hour.

3. Web server logs

Like any server, this one keeps a technical log of the requests it receives: IP address, date, page requested, browser. Those logs serve the proper running and the security of the server, and nothing else. They are neither cross-referenced with anything nor disclosed.

4. The visitor count

Knowing how many people come across this project, and by which route, helps us make it known. That count is done here, on this server, as plainly as it can be.

• No cookies, so no consent to ask for. You are recognised, for the length of one visit, by an encrypted, non-reversible fingerprint of your IP address and your browser. The address itself is never recorded.
• What is kept: the number of page views and visits, whether a visit is a return, the country, and the site you came from (search engine, social network, link) when your browser says so. Nothing else: not the pages read one by one, not how long you stayed, not your path through the site.
• The country is looked up on this server first, in an address allocation table held locally: in that case your address never leaves the machine. But the hosting of this site does not pass visitors’ addresses on to the program, so that table is silent most of the time. The country is then asked for by your browser from a public geolocation service (ipwho.is, geojs.io or ipapi.co, whichever answers first), which sees your IP address on that occasion. That call leaves your machine, not this server, and only the country code — two letters — comes back to us. The result is kept for 30 days in your browser so the call is not repeated on every page.
• Nothing is kept beyond 30 days — neither the daily detail nor the fingerprints. After that, two anonymous counters are all that remain, and they concern no one in particular.
• These figures are neither public, nor shared, nor sold, and they serve no profiling and no advertising.

The two connections to a third party

Everything else on this site is served by the personal server. Two exceptions, named here rather than passed over in silence; both send your IP address, and nothing else.

1. The typefaces, loaded from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). Loading them sends your IP address to Google LLC. No other data is sent, and that service sets no cookie.

2. Country geolocation, requested by your browser from ipwho.is, failing that geojs.io, failing that ipapi.co — whichever answers first, once per month of browsing. That service sees your IP address; the site itself receives only the country code. See point 4 above.

Hosting the typefaces on this server would remove the first; the second will go the day the hosting passes visitors’ addresses on to the program, which will then read the country from its local table and ask no one for anything.

Your rights

Under the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have the right to access, rectify, erase, restrict and object to the processing of data concerning you.

To exercise it, one address only: contact@nlion.fr. Requests are dealt with within a month. A message received through the form is deleted on request, with no reason to give.

Should we fail to agree, you may refer the matter to the CNIL, the French data protection authority.

My commitment

I undertake to respect your privacy and to defend your digital freedom. Everyone should be able to use digital tools without needless intrusion. I therefore design my sites and my tools to be as frugal with data as they can be: nothing is collected that is not strictly necessary, nothing is kept beyond its usefulness, nothing is handed to a third party.

Should this policy ever change, I undertake to tell you, and to obtain your consent where consent is due.

Intellectual property and archives

The texts, the design and the code of this site are the property of their author. The archive documents reproduced here — family photographs, press cuttings, administrative records — appear as part of historical and documentary research, for the purpose of information and without commercial exploitation.

If you hold rights over one of these documents and would like to discuss it, write to contact@nlion.fr: the request will be dealt with straight away.