Privacy Policy
Last updated: August 9, 2026
LeanStackLab is designed to collect as little personal data as possible. This page explains, in plain language, what we collect, why, on what legal basis, and the rights you have under the European General Data Protection Regulation (GDPR).
1. Who is responsible for your data
The data controller (the person who decides how and why your data is processed) is the publisher of this site:
[À REMPLACER : nom complet de l'éditeur], sole proprietor (micro-entrepreneur) under French law — [À REMPLACER : adresse professionnelle] — contact: [À REMPLACER : email de contact].
Full publisher details are available on the Legal Notice page.
2. The newsletter (waitlist)
- What we collect: your email address, and nothing else — no name, no phone number.
- Why: to send you the LeanStackLab newsletter and let you know when new tool reviews are published.
- Legal basis: your consent (Article 6(1)(a) GDPR), given when you tick the consent box and submit the signup form — we never pre-tick that box — and confirmed by double opt-in: you only join the list after clicking the confirmation link we email you.
- Who processes it: emails are stored and sent through Brevo, a French email service provider that hosts its data in the European Union. Brevo acts as our processor and only uses your email on our instructions.
- How long we keep it: until you unsubscribe, and at most 3 years after your last interaction with our emails.
- Withdrawing consent: every email we send contains an unsubscribe link. One click removes you from the list — no justification needed. You can also email us at [À REMPLACER : email de contact].
Your email address is never sold, rented or shared for advertising.
3. Cookies and similar technologies
A cookie is a small file a website stores in your browser, typically to recognize you between pages or visits.
We measure our audience with analytics tools loaded through Google Tag Manager — but only with your agreement:
- a consent banner asks for your explicit agreementbefore any analytics cookie is set — nothing loads if you decline or ignore the banner (Google "Consent Mode v2" keeps everything blocked by default);
- "Accept" and "Decline" are always presented as equal choices;
- your choice is remembered for 13 months at most, after which we ask again;
- you can change your mind at any time via the"Cookie settings" button in the footer of every page.
If you decline, or simply ignore the banner, no analytics tool loads at all. The only thing we then store in your browser is your own cookie choice (accept or decline), which is strictly necessary and therefore exempt from consent.
4. Affiliate links
Some links on this site are affiliate links (see our Affiliate Disclosure). Clicking one takes you to the vendor's own website, which may set its own cookies to attribute the sale — on their domain, undertheir privacy policy, which we do not control. LeanStackLab itself sets no tracking cookie when you click an affiliate link.
5. Hosting and server logs
This site is hosted by Vercel Inc. (USA). Like every web host, Vercel keeps short-lived technical logs (including IP addresses) to run and secure the service. The legal basis is our legitimate interest in keeping the site online and safe (Article 6(1)(f) GDPR). Transfers of this technical data outside the EU are covered by the safeguards provided in Vercel's privacy policy(standard contractual clauses).
6. Your rights
Under the GDPR, you can at any time:
- access the data we hold about you;
- have it corrected or deleted;
- restrict or object to its processing;
- receive it in a portable format;
- withdraw your consent (for the newsletter: the unsubscribe link), without affecting the lawfulness of what was done before.
To exercise any of these rights, email us at [À REMPLACER : email de contact]. We answer within one month. If you believe your rights are not respected, you can lodge a complaint with the French supervisory authority, the CNIL (cnil.fr).
7. Changes to this policy
If we ever collect new data or add new tools, we will update this page and its "Last updated" date before the change takes effect.