Privacy policy

1. Who we are and scope

This site is operated by incredibles, a senior web development studio based in France. For any privacy-related question, you can reach us at [email protected].

This policy applies to all visitors of incredibles.dev, regardless of where you are located. We provide rights and information appropriate to your jurisdiction, including under the EU General Data Protection Regulation (GDPR), the UK GDPR and the Data Protection Act 2018, and applicable US state privacy laws such as the California Consumer Privacy Act (CCPA/CPRA), the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act and similar laws.

2. What data we collect

We collect the data you give us explicitly through the contact form on this site — name, email address, company name, company website, budget range, estimated start date, expected launch date and the message you send. We also collect technical logs that web servers generate automatically (IP address, user agent, requested URL, timestamp) and we apply basic rate limiting on form submissions to prevent abuse.

We use Plausible Analytics to measure aggregated traffic on this site. Plausible is a privacy-friendly analytics service that does not use cookies, does not track users across sites, and does not collect any personal data — it only records anonymous, aggregated metrics such as page views, referrers and country-level location. We do not use any advertising or marketing trackers.

3. Why we use this data

We use contact form submissions to respond to your enquiry, scope and quote projects, sign agreements, deliver our services and bill them. We use technical logs and rate-limit data for security, troubleshooting and abuse prevention.

4. Legal basis

Under the EU GDPR and the UK GDPR, our processing relies on the following bases: your consent when you submit the form, the performance of a contract or pre-contractual steps when we discuss and run an engagement with you, and our legitimate interest in operating and securing this website. For visitors in US states with privacy laws, we process personal information only for the purposes disclosed in this policy and we do not sell or share personal information for cross-context behavioral advertising.

5. Who has access

The two co-founders of incredibles have access to the data submitted through the form. We rely on the following third-party processors to operate the site and respond to enquiries: our email provider, our hosting provider, a spreadsheet service used to store enquiry data, and Plausible Analytics for anonymous aggregated traffic measurement. These providers process data on our behalf under their own data-protection terms.

6. International transfers

Our business is established in France (EU). Some of the third-party processors we use are based outside the European Economic Area or the United Kingdom — for example in the United States. When this is the case, transfers are covered by appropriate safeguards: the European Commission's Standard Contractual Clauses (SCCs) for transfers from the EEA, and the UK International Data Transfer Agreement (IDTA) or UK Addendum to the SCCs for transfers from the United Kingdom. Where relevant, we rely on adequacy decisions (such as the EU-US Data Privacy Framework) and we carry out transfer impact assessments.

7. How long we keep data

We keep contact-form submissions for as long as they are useful to respond to your enquiry and follow up on a potential engagement, and for up to 36 months after the last contact. Data tied to invoiced engagements is kept for the legal accounting retention period (10 years under French law). Server logs are kept for a maximum of 12 months.

8. Your rights

To exercise any of the rights described below, write to [email protected]. We respond within 30 days (and within 45 days for US state-law requests, extendable once where permitted by law). We will not discriminate against you for exercising any of these rights.

If you are in the European Economic Area

Under the EU GDPR you can request access to your personal data, ask for it to be rectified or deleted, restrict or object to its processing, request its portability, and withdraw any consent you previously gave. You can lodge a complaint with your local supervisory authority — in France, the CNIL (cnil.fr).

If you are in the United Kingdom

Under the UK GDPR and the Data Protection Act 2018 you have the same rights as listed above. You can lodge a complaint with the UK Information Commissioner's Office (ICO — ico.org.uk).

If you are in the United States

Depending on your state of residence, you may have rights under applicable state privacy laws, including the right to know what personal information we collect and the purposes for which we use it, the right to access, correct or delete that information, the right to portability, and the right to opt out of certain processing. We do not sell or share personal information, we do not use personal information for cross-context behavioral advertising, and we do not use sensitive personal information for purposes that would require a separate right to limit such use. California residents may designate an authorized agent to make requests on their behalf. Residents of California, Virginia, Colorado, Connecticut, Utah and other US states with comparable laws may exercise the rights granted to them by their state's laws by writing to us at the address above.

9. Cookies

This website uses only the strictly necessary cookies required for the site to function (such as language preference). Our analytics provider, Plausible, does not use cookies. We do not set any marketing or third-party advertising cookies, and we do not need to display a cookie consent banner because no consent-requiring cookies are deposited.

10. Updates

We may update this privacy policy from time to time. The current version is the one published on this page.

Last updated: 12 May 2026.