This site sets no cookies, loads no third-party scripts, and shows no consent banner — because there is nothing to consent to. It counts what is looked at without knowing who is looking, and the only thing it holds that could identify you is an email address, and only if you typed one into the newsletter field.

Your email address, if you subscribe to the newsletter, together with the page you were reading when you did.

The words of a search that returned nothing — and only those words. They are stored with no identifier of any kind attached, because what is useful about them is what the catalogue is missing, not who was looking. Searching happens in your browser; the query itself never leaves it unless it found nothing.

Which objects are looked at, and which links out are followed. These counts carry a session value, the country your request arrived from, and where you came from: the kind of source, and the site itself when there is one — google.com, instagram.com. The address of the page you came from is never kept, only its host: a full address carries paths and parameters that routinely identify people, and none of that answers which site sent you.

The session value is a one-way fingerprint computed on our side from your address and browser, salted with a secret that changes every day. It cannot be reversed into you, it is never stored in a form that could be, and yesterday's value cannot be linked to today's. No cookie is set, and nothing follows you off this site. It exists so that a view and a click can be counted as one visit, and for no other purpose.

An account holds your email address, the objects you have kept and the lists you have made. It can also hold a profile: a username, which is required if you fill in the rest, and optionally a first name, a last name, a date of birth, a country and a picture. Every one of those is yours to leave empty, and leaving them empty costs you nothing on this site.

Your picture is stored publicly, because it appears beside any list you choose to share. Everything else on your profile is visible only to you until we say otherwise here.

No password exists to be stolen, and browsing this site never requires an account.

Staying signed in stores a session token in your browser. It is not a cookie and it is not shared with anyone; it is what saves you asking for a link on every visit, and signing out removes it.

Deleting your account removes all of it at once, immediately, from the page itself. There is no waiting period and nothing is kept back.

To send you the newsletter you asked for. The legal basis is your consent, given by submitting the form, and withdrawn with the unsubscribe link at the foot of every email — one click, no account, no reason to give.

What is recorded alongside the address is the moment consent was given and the page it was given on, so that the consent can be shown rather than asserted.

Newsletter addresses: until you unsubscribe, and in any case no longer than three years after your last contact with us.

Unsubscribing does not delete the row: the address stays, marked as having left, so that it cannot be added back by an import or a mistake. Ask us and it goes entirely.

Counts: kept as aggregates. The daily salt that produced a session value is gone the next day, so the individual rows stop being linkable to anything, including to each other.

Supabase — Database and authentication. European Union (Frankfurt).

Cloudflare — Hosting, content delivery and image storage. European Union (Western Europe) for stored images; global network for delivery.

We do not sell data, and we do not share it for advertising.

Under the GDPR you may ask for access to your data, its correction, its deletion, a copy of it in a portable form, or a restriction on how it is used. You may also object to its processing, and withdraw consent at any time.

Write to notbrutal[@]proton.me. We answer within a month. If the answer does not satisfy you, you may complain to the CNIL.