個人情報
Privacy policy
Last updated: October 21, 2026
What personal data this site collects, why, how long it is kept, and what you can do about it.
In short
- No advertising, no analytics, no tracking cookies.
- The AI assistant keeps conversations for 12 months, tied to an anonymous id, never your name.
- The booking calendar only loads when you open it.
- You can ask to see or delete your data at any time.
Who is responsible
Matthias Marin, a sole proprietor registered in Japan (個人事業主), Fuchu, Tokyo, Japan. For anything about your data, write to hello@matthiasmarin.com.
This policy is written to meet Japan's Act on the Protection of Personal Information and, because this site welcomes visitors from Europe, the EU and UK General Data Protection Regulation (GDPR).
What is collected, and why
When you browse the site
- What
- The technical data your browser sends with every request: IP address, browser type, the page asked for, the time.
- Who sees it
- Netlify, the hosting provider, in its server logs. To show the fonts and the 3D scenes, your browser also downloads files from Google Fonts and from jsDelivr, a public code library service: they receive your IP address when they send those files.
- Why
- To deliver the pages and keep the site secure.
- Legal basis
- Legitimate interest: running a working, secure website.
- How long
- As long as each provider keeps its logs. Nothing is copied into Matthias's own files.
When you talk to the AI assistant
- What
- The messages you type and the replies. A random session id, kept in your browser tab and erased when you close it. A fingerprint of your IP address: a one-way, salted code that cannot be turned back into the address. Your IP address itself is never stored.
- Who sees it
- The messages pass through Netlify, are handled by an automation server rented from Hostinger (located in Indonesia), and are sent to an AI model service, reached through OpenRouter, Inc. (United States), which writes the reply. Matthias reads the conversations to improve the answers.
- Why
- To answer you, to improve the answers, and to stop abuse (there is a limit on messages per visitor).
- Legal basis
- Legitimate interest: answering visitors and keeping the assistant useful and safe.
- How long
- 12 months, then deleted.
Please don't type sensitive information in the chat: passwords, health details, or the names of your own clients.
When you book a free chat
- What
- Your name, your email, your time zone, and what you choose to write in the booking form. Then the call itself, which is not recorded.
- Who sees it
- Cal.com, Inc. (United States), which runs the booking calendar, and Google (Calendar and Meet), for the invitation and the call. The calendar only loads from Cal.com when you open it.
- Why
- To arrange the call and hold it.
- Legal basis
- Steps taken at your request before a possible contract.
- How long
- Up to 3 years after our last contact, unless you become a client.
When you become a client, or send an email
- What
- Your contact details, our emails, the invoices and the record of your bank transfers.
- Who sees it
- Matthias, his email provider, and his accountant when needed for tax.
- Why
- To carry out the coaching, send invoices and meet tax obligations.
- Legal basis
- The contract, and the legal obligation to keep accounting records.
- How long
- Invoices and accounting records: as long as Japanese tax law requires (up to 7 years). Other emails: up to 3 years after our last contact.
Cookies and browser storage
This site sets no advertising, analytics or tracking cookies. The AI assistant keeps its random session id in your browser tab (session storage), which is erased when you close the tab. If you open the booking calendar, Cal.com may set the cookies it needs to work.
Who receives your data
- Netlify, Inc. (United States): hosting.
- Hostinger (server in Indonesia): the automation server behind the AI assistant.
- OpenRouter, Inc. (United States), and the AI model provider it sends the request to: the replies of the assistant.
- Cal.com, Inc. (United States): the booking calendar.
- Google (United States): Calendar and Meet for the calls, and the fonts of this site.
- jsDelivr: the public code libraries that draw the 3D scenes.
Your data is never sold, and never shared for advertising.
Transfers outside Europe
Matthias works from Japan, which the European Commission recognises as protecting personal data adequately. For providers in the United States, transfers rely on the EU-U.S. Data Privacy Framework where the provider takes part in it (Netlify and Cal.com do), or on Standard Contractual Clauses. For the other countries, they rely on the safeguards the provider offers, such as Standard Contractual Clauses.
Your rights
You can ask to see your data, correct it, delete it, limit its use, object to its use, or receive a copy in a common format. Write to hello@matthiasmarin.com: you get an answer within one month. For a chat conversation, give the approximate date and one sentence you wrote, so it can be found without knowing your name.
If you think your data is mishandled, you can complain to the data protection authority of your country in Europe, or to Japan's Personal Information Protection Commission.
Security
The access keys to these services stay on the server, never in the pages of this site. Only Matthias has access to the conversations and to client files.
Children
This site and its services are meant for adults running a business. They are not meant for anyone under 16.
Changes to this policy
When this policy changes, the date at the top changes too. For a change that matters to you as a client, you are told by email.