Privacy & legal notice

We collect only what is necessary, for clear purposes, with no advertising or resale. This page explains what data we process, why, for how long, and how to exercise your rights.

Last updated: July 2026.

Ethics as Code

Our commitment — beyond the law

Wolf Agency does not merely comply with the GDPR: we make it an ethical commitment, applied first to ourselves. The S.A.N.C.T.U.S.© and W.O.L.F.© protocols we offer our clients, we apply to ourselves in full.

Ethics as Code. For us, ethics is not a speech: it is code. We do not merely state ethical commitments in the manner of hypocritical communicators — we embed all our ethical rules into every line of code we produce, for ourselves as for our clients. What is stated as a moral rule is written, technically, into the software. Verifiable. Auditable. Enforceable.

It has never been, and it will never be, a question of using anyone’s personal data, nor selling it, nor exploiting it for any purpose whatsoever — however commercial.

A commercial exploitation of personal data does not cease to be a plunder simply because it is commercial. We reject this logic in its very principle. Your data belongs to you, and to you alone.

Zero cookies. Our sites set no cookie, no tracker, no beacon — neither ours nor a third party’s. Not out of constraint, but by choice: for healthy, respectful browsing and a better experience — with no surveillance, no profiling, no capture.

The only data we process is what you entrust to us voluntarily (contact or application form), for the sole purpose of replying to you. It never leaves that scope.

Data controller

Wolf Agency — technology & AI studio (wolf-agency.org).
Registration: RCS 519 506 109.
Contact / data protection officer: board@wolf-agency.org

Data we process

A concise register of our processing activities. For each: what we collect, why, on what legal basis, and how long we keep it.

Contact form (B2B brief)

What we collect: the identity and contact details you enter (name, email, optionally company, role, country, website, need, budget, context, message). No IP address is kept in clear text (salted fingerprint only, for abuse prevention).
Purpose: to answer your request and prepare a possible proposal.
Legal basis: your consent (checkbox) and pre-contractual steps.
Retention: up to 3 years after our last exchange, then deleted.

Application “Become a Digital Exorcist©”

What we collect: name, email, country, availability, background, motivation and the free text you add. No IP address kept in clear text.
Purpose: to review your application and get back to you.
Legal basis: your consent (checkbox) and pre-contractual steps.
Retention: up to 2 years after our last contact if you are not selected, then deleted.

Discussion wall “Chat process”

What we collect: the nickname and message you voluntarily post (public). We ask you not to include personal or sensitive data. Your IP address is never kept in clear text (salted fingerprint only, never displayed, for anti-spam and moderation).
Purpose: to run a public discussion space about our work.
Legal basis: our legitimate interest in offering a moderated discussion space; your post is voluntary.
Retention: messages are kept in a capped queue (oldest are auto-removed); removal on request is possible.

Audience measurement (cookieless)

What we collect: page viewed, timestamp, browser language, device type, referrer, HTTP status, plus a COUNTRY code and CONTINENT inferred from your connection, and a visitor fingerprint salted with a DAILY salt. No advertising/tracking cookie, no IP kept: the IP is used only to infer the country (then immediately discarded) and is never shared with a third party. We keep only the country and continent, never the address.
Purpose: to measure traffic in an aggregated, anonymous way.
Legal basis: legitimate interest. Anonymous, cookieless audience measurement with no persistent identifier — exempt from consent.
Retention: each day’s salt is destroyed daily, making fingerprints non-re-attributable; only anonymous statistics remain.

Cookies & trackers

We use no advertising cookies and no third-party trackers. No consent banner is therefore required.

A single, strictly functional cookie: “wolf_lang”, which remembers your language choice. It is set only if you explicitly choose a language, lasts one year, and is used for no tracking.
Audience measurement works without any cookie.
No social-network, advertising or profiling cookies.

Your rights

Under the GDPR, you have the following rights over your data:

Right of access: obtain a copy of the data we hold about you.
Right to rectification: correct inaccurate data.
Right to erasure: request deletion of your data.
Right to object: object to processing based on legitimate interest.
Right to restriction: request that processing be frozen.
Right to portability: receive your data in a machine-readable format.
Right to withdraw consent at any time, without affecting processing already carried out.

To exercise these rights, write to us at board@wolf-agency.org. You may also lodge a complaint with your data protection authority (in France, the CNIL — cnil.fr).

Hosting & processors

We keep third parties to a minimum and favour providers established in the European Union:

Hosting: Gandi SAS (France, European Union).
Notification emails: Brevo SMTP relay (Sendinblue SA, France, European Union) — used only to notify us of a request; the stored request is authoritative regardless of the email.
No data is sold or shared for advertising purposes.

Transfers outside the European Union

Our main processing and providers are located in the European Union. We carry out no transfer of your personal data outside the EU that is not framed by the safeguards required by the GDPR.

Minors

This site and its forms are intended for a professional, adult audience. We do not knowingly collect data about people under 15. If you believe a minor has sent us data, write to us and we will delete it.

Contact us

For any question about this policy or your personal data, write to us at board@wolf-agency.org.