Skip to content
Improbability WORKS
Français (current: EN, switch to FR)

Privacy policy

Last updated · April 18, 2026

Improbability Works (“we”, “us”) respects your privacy. This policy explains, in plain language, what personal data we collect on improbabilityworks.com, why, how long we keep it, and the rights you have under the EU General Data Protection Regulation (GDPR) and the French Data Protection Act.

Data controller

The data controller is Improbability Works, based in France.

Contact: privacy@improbabilityworks.com

We have not designated a Data Protection Officer (DPO) as we operate below the GDPR threshold that would require one. The contact above handles all privacy-related requests.

What we collect

Newsletter subscription

If you subscribe to our newsletter (“the Dispatch”), we collect your email address and the timestamp of your consent. We do not collect your name, IP address, or device fingerprint.

Server logs

Our hosting provider stores minimal HTTP logs (IP address, user-agent, URL requested, timestamp) for the purpose of operating and securing the site. These logs are retained for a short period by the provider and are not correlated with newsletter or other personal data.

Analytics

By default, we do not use Google Analytics or any other tracker that identifies you. If we enable privacy-friendly, cookieless analytics (e.g. Plausible or Umami) in the future, this page will be updated before the tracker goes live.

Cookies

This site sets no tracking or advertising cookies. Only strictly technical local storage may be used to remember your language preference. Because no non-essential cookies are used, no cookie banner is shown — consistent with the guidance from the French CNIL.

Why we collect it

  • Newsletter email: to send you occasional updates about Velvet Door and the studio.
  • Server logs: to operate and secure the site, prevent abuse, and diagnose incidents.
  • Newsletter: your explicit consent (GDPR art. 6(1)(a)).
  • Server logs: our legitimate interest in operating a safe, functioning site (GDPR art. 6(1)(f)).

How long we keep it

  • Newsletter: for as long as you stay subscribed. Unsubscribing removes your address from active lists within 30 days.
  • Server logs: retained by the hosting provider for the minimum period required for security and operations (typically under 12 months).

Who has access

Your email address is handled by our newsletter provider under a data-processing agreement.

  • Newsletter provider: [to confirm — Buttondown / Resend / ConvertKit]
  • Hosting provider: [to confirm — Netlify / Vercel / Cloudflare Pages]

We do not sell, rent, or otherwise share your personal data for marketing purposes.

International transfers

Some of our providers are based outside the European Economic Area (typically in the United States). Transfers, where they occur, rely on the European Commission’s Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.

Your rights

Under the GDPR, you have the right to:

  • Access the personal data we hold about you;
  • Request correction of inaccurate data;
  • Request deletion of your data (“right to erasure”);
  • Withdraw your consent at any time;
  • Object to processing based on legitimate interest;
  • Lodge a complaint with a supervisory authority — in France, the CNIL (cnil.fr).

To exercise any of these rights, email privacy@improbabilityworks.com. We respond within 30 days.

Updates to this policy

We may update this policy to reflect changes in our practices or in the law. The “Last updated” date at the top of this page reflects the most recent version. Material changes will be highlighted on the site for a reasonable period.

← Back to home