Personal data

This site collects the strict minimum. You can browse all of it, including taking the diagnostic and reading your result, without ever providing any personal information.

The data controller is Clément Lichan, reachable at contact@arkhen.xyz.

This site sets no cookies. It uses no Google Analytics, no advertising pixel, no social media button, and no font loaded from a third-party server.

Audience measurement is handled by Umami, open-source software installed on the publisher's own server. It sets no cookie, creates no persistent identifier, follows nobody across sites, and records only aggregate data: page viewed, referrer, country, device type and browser. None of it identifies you.

That is why no consent banner is shown: there is nothing to consent to.

At the end of the diagnostic you may choose to leave an email address to receive a detailed report and a method document. This form is optional: your result is shown in full without it.

If you fill it in, the following is recorded: your email address and, where you provide them, your first name, your organisation and your role. The diagnostic result is stored alongside them: the scope you declared, the level of human risk, the voussoir identified as blocking, and your answers to the questionnaire.

Legal basis: your consent, given through the checkbox preceding submission. Purpose: sending you the documents announced, and nothing else.

This data is held with Supabase, in a data centre located in the European Union (Paris region). It is readable by the publisher alone.

The personalised analysis is optional: it is produced only if you ask for it, and the report is sent to you without it otherwise.

When you do ask for it, your questionnaire answers and the diagnostic result are sent, for the duration of that generation alone, to OpenRouter, Inc. which routes the request and to Anthropic, PBC which runs the language model. Both companies are established in the United States: this processing therefore takes place outside the European Union.

The recipient is locked in the request itself: the provider is pinned, any fallback to another provider is refused, and providers that would retain the data or train a model on it are excluded. If Anthropic is unavailable, the analysis fails rather than going elsewhere.

Your email address, your name and your organisation are never sent to them. The text produced is returned to you and attached to your report; it is not retained by the publisher.

No data is sold, rented, exchanged or passed to a third party for commercial or advertising purposes.

Contact data is kept for three years from the last exchange, then deleted.

Aggregate audience measurements are kept for twenty-four months.

A deletion request is handled within thirty days, with no justification required.

You have the right to access, rectify, erase, restrict and object, as well as the right to data portability. You may withdraw your consent at any time.

To exercise these rights, write to contact@arkhen.xyz. You will receive an answer within thirty days.

If that answer does not satisfy you, you may refer the matter to the French data protection authority (CNIL), 3 place de Fontenoy, 75007 Paris, cnil.fr.

Exchanges with this site are encrypted end to end (HTTPS). Access to the administration area is protected by authentication and restricted to the publisher. Database keys never leave the server.

As no system is infallible, a data breach presenting a risk to your rights would be notified to you and to the CNIL within the timeframes set by European regulation.