A short document, because the site does very little. There is no account to create, nothing to log in to, and no analytics watching you read.
Reading this site involves no cookies, no analytics, no tracking pixels, no advertising and no third-party fonts. Your browser talks to one server, that server writes a line in a log, and that is the whole of it. Personal data reaches the operator only if you send an email or book a call, and then only what you chose to put in it.
The sections below say the same thing at the length a regulator prefers.
The controller for any personal data processed through this site is the operator named in the legal notice, at the contact address given there.
Processing is subject to Moroccan Law 09-08 on the protection of individuals with regard to the processing of personal data. No declaration has been made to the CNDP, because the site operates no file of personal data: there is no form, no account and no mailing list, and nothing is collected beyond the server logs described below. If that changes, a declaration follows before the feature does.
The site is hosted on Vercel. Like every web server, it records technical details of each request so that pages can be delivered and abuse can be investigated.
These entries are not combined with anything else, not used to build a profile, and not consulted unless something goes wrong. They are held for Vercel’s own default retention period and then discarded; the operator keeps no separate copy. Vercel’s servers may sit outside Morocco, which means a request can be logged in another country.
The typefaces are served from this site, alongside everything else. Your browser makes no request to Google Fonts or any other font service, and no third party learns that you opened a page here.
No cookies are set. No analytics, tracking, heatmap or advertising service is used, and no consent banner is needed because there is nothing to consent to.
If measurement is ever added, it should be something that counts page views without identifying readers, and this section will say which tool and what it stores.
If you write, the operator receives your address, your message and whatever else you chose to include. It is used to answer you and to carry on the conversation, and for nothing else. It is not added to a mailing list, because there is no mailing list.
Calls are booked through Cal.com, which handles the scheduling on the operator’s behalf and stores the name, email address and time you supply. What Cal.com does with it is governed by their own privacy policy. Nothing is booked, and nothing is shared, unless you choose to open that link.
The design system is downloaded as a file. No account, no email address and no form stands between you and it; the request appears in the server log described above, exactly like any other page request. Nothing in the downloaded package reports back — it contains no runtime, no telemetry and no network calls.
Under Moroccan data protection law you may ask what personal data is held about you, have it corrected if it is wrong, have it deleted, and object to its processing. Where the GDPR applies to a given activity, the equivalent rights include access, rectification, erasure, restriction, portability and objection.
An ordinary email to the address in the legal notice is enough. No form, no template, and no reason needs to be given.
If you are not satisfied with how a request was handled, you may complain to the Commission Nationale de Contrôle de la Protection des Données à Caractère Personnel (CNDP) in Morocco, or to the supervisory authority in your own country where one has jurisdiction.
Raising it directly first is usually faster, and it is the only route that lets the problem actually get fixed.