Confidentiality and privacy protection policy

In accordance with the Quebec Law 25, the person responsible for personal information protection for the companion site Digital Analytics Guide is:

Stéphane Hamel
Author, consultant and educator in digital analytics and data governance.
Contact email: [email protected]
Professional profile: linkedin.com/in/shamel

The responsible ensures compliance with applicable Quebec legislation and ensures that best practices in digital sobriety and data protection are rigorously applied.

An Personal information is information that concerns a physical person and allows, directly or indirectly, to identify them

The site currently requires no account, name, email address, password, authentication, or payment information to use the tools.

When certain tools remember answers so you can resume your work, those answers are stored only in the browser's local storage. They are not sent to the server or associated with a profile.

If you choose to contact the author by email or via LinkedIn, the transmitted information is voluntary and used exclusively to respond to your request.

To evaluate interest in different chapters and learning tools and optimize navigation experience, this site uses technical audience measurement tools:

• Google Tag Manager: Used to manage tag loading. Loading it triggers a technical communication with Google services.
• Google Analytics: Configured with analytical storage refused by default. According to the active Google Consent Mode configuration, technical signals without cookies may be transmitted. Reports used by the site are viewed in aggregate form.
• Advertising Targeting Deactivation: No remarketing, advertising profiling, Google signals, or cross-site behavioral tracking feature is enabled on this site.

The site uses the functional cookie site_locale to remember the selected language. It is not used for authentication or advertising. Analytics storage is denied by default as described above.

To ensure security, performance, and visual rendering of this companion site, we rely on services and infrastructures:

• DigitalOcean (Web hosting and private cloud server): The primary hosting of the site and its resources is ensured on a private cloud instance (Droplet dedicated) operated by DigitalOcean LLC, offering strict access control, system security, and complete isolation of the execution environment.
• Cloudflare (CDN and security network): Network traffic transits through Cloudflare to ensure performance optimization, SSL/TLS encryption, and protection against denial-of-service (DDoS) attacks. Cloudflare temporarily processes network connection data (origin IP addresses) in strict adherence to security and confidentiality standards.
• Google LLC (tag management and audience measurement): Google may process technical data necessary for service delivery. Analytical storage is refused by default, and advertising functions are disabled.
• Lucide Icons (Local Hosting of Icons): The interface icon library (Lucide Icons) is hosted directly on our private server, eliminating any dependence on an external CDN network for visual rendering.

The server does not retain account or subscription data, or any tool responses. Data stored locally remains in the browser until it is reset in the tool or deleted through the browser settings. Technical server logs are retained only as long as required for security and operations. Information voluntarily sent by email is retained only as long as needed to follow up on the request.

Pursuant to the Quebec legislation on personal information protection, you have the following rights:

• Right to access and confirm the processing of your personal information;
• Right to rectification if inaccurate personal data was held;
• Right to withdraw consent for the processing of personal data, if applicable;
• Right to lodge a complaint with the Data Protection Officer or with the Québec Access to Information Commission (CAI).