fix(legal): clarify data collection by third-party providers #2

2026-01-27T17:16:29Z

jessy-david-dev commented

2026-01-27 17:16:29 +00:00

(Migrated from github.com)

No description provided.

copilot-pull-request-reviewer[bot] (Migrated from github.com) reviewed 2026-01-27 17:19:35 +00:00

copilot-pull-request-reviewer[bot] (Migrated from github.com) left a comment

Pull request overview

This PR updates the privacy policy (politique de confidentialité) to provide clearer information about data collection by third-party service providers. The changes shift from a first-person active voice ("Je collecte") to a more accurate passive construction ("peuvent être collectées"), and provide specific details about which data is collected directly versus through third-party providers.

Changes:

Updated language to clarify that personal data "may be collected" rather than "I collect"
Added explicit clarification that contact form data is collected directly by the site owner
Replaced generic technical data collection points with specific third-party services (Google Analytics, Cloudflare Turnstile, hosting provider)
Added disclaimer about the site owner's access to third-party collected data

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

## Pull request overview This PR updates the privacy policy (politique de confidentialité) to provide clearer information about data collection by third-party service providers. The changes shift from a first-person active voice ("Je collecte") to a more accurate passive construction ("peuvent être collectées"), and provide specific details about which data is collected directly versus through third-party providers. **Changes:** - Updated language to clarify that personal data "may be collected" rather than "I collect" - Added explicit clarification that contact form data is collected directly by the site owner - Replaced generic technical data collection points with specific third-party services (Google Analytics, Cloudflare Turnstile, hosting provider) - Added disclaimer about the site owner's access to third-party collected data --- 💡 <a href="/jessy-david-dev/jessy-david.dev/new/main/.github/instructions?filename=*.instructions.md" class="Link--inTextBlock" target="_blank" rel="noopener noreferrer">Add Copilot custom instructions</a> for smarter, more guided reviews. <a href="https://docs.github.com/en/copilot/customizing-copilot/adding-repository-custom-instructions-for-github-copilot" class="Link--inTextBlock" target="_blank" rel="noopener noreferrer">Learn how to get started</a>.

app/politique-de-confidentialite/page.tsx

						
				@@ -152,2 +159,4 @@

				                  </li>

				                </ul>

				                <p className="text-sm text-slate-500 mt-3">

				                  Je n&apos;ai pas accès direct à ces données techniques. Elles

copilot-pull-request-reviewer[bot] (Migrated from github.com) commented

2026-01-27 17:19:35 +00:00

The conditional clause "(si vous acceptez les cookies analytiques)" in the heading is misleading. According to the cookies section (lines 302-320), Cloudflare Turnstile is classified as "strictly necessary" and exempt from consent, and hosting logs are typically always collected. Only Google Analytics requires consent for analytical cookies. Consider either separating these into different subsections based on consent requirements, or revising the heading to clarify that the consent condition only applies to Google Analytics, not to all services listed.

app/politique-de-confidentialite/page.tsx

copilot-pull-request-reviewer[bot] (Migrated from github.com) commented

2026-01-27 17:19:34 +00:00

The statement "Je n'ai pas accès direct à ces données techniques" (I don't have direct access to this technical data) may be inaccurate. Typically, website owners have access to Google Analytics data through the GA dashboard, Cloudflare Turnstile data through the Cloudflare dashboard, and hosting server logs through their hosting provider's control panel. Consider revising this to be more accurate, such as "Ces données sont traitées par les prestataires concernés selon leurs propres politiques de confidentialité" (This data is processed by the relevant service providers according to their own privacy policies) without claiming lack of access, or clarify that you have limited/restricted access rather than no direct access.

                  Ces données sont principalement traitées par les prestataires
                  concernés selon leurs propres politiques de confidentialité.
                  Je peux disposer d&apos;un accès limité à certaines statistiques
                  agrégées via leurs interfaces.

The statement "Je n'ai pas accès direct à ces données techniques" (I don't have direct access to this technical data) may be inaccurate. Typically, website owners have access to Google Analytics data through the GA dashboard, Cloudflare Turnstile data through the Cloudflare dashboard, and hosting server logs through their hosting provider's control panel. Consider revising this to be more accurate, such as "Ces données sont traitées par les prestataires concernés selon leurs propres politiques de confidentialité" (This data is processed by the relevant service providers according to their own privacy policies) without claiming lack of access, or clarify that you have limited/restricted access rather than no direct access. ```suggestion Ces données sont principalement traitées par les prestataires concernés selon leurs propres politiques de confidentialité. Je peux disposer d'un accès limité à certaines statistiques agrégées via leurs interfaces. ```

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: Jessy/jessy-david.dev#2