Privacy policy

This policy explains how Baguette Labs ("we") collects and uses personal data through the website kokot (the "Site").

1. Data controller

Baguette Labs, 1009 chemin Lavizard 31600 Lamasquère. Privacy contact: contact@baguette-labs.fr.

2. What we collect and why

Data	Purpose	Legal basis	Retention
Email address, preferred language, referring page and IP address (waiting list)	Notify you when the product launches; prevent abuse	Consent	Until launch communications end or you ask us to delete it
Name, email address, message content and IP address (contact form)	Answer your request; prevent abuse	Legitimate interest (responding to you)	12 months after our last exchange
Aggregated, anonymous usage statistics	Understand how the Site is used	Legitimate interest	Anonymous — not personal data

When you join the waiting list we send a confirmation email. Your address is only used once you have clicked the confirmation link.

3. Analytics and cookies

The Site uses cookieless, privacy-friendly analytics (Umami). No tracking cookie is set and no personal data is transmitted to the analytics provider. The Site uses only the technical cookies strictly necessary for it to function (session, security), which do not require consent.

4. Anti-spam protection

Our forms may be protected by Cloudflare Turnstile, which analyses technical signals from your browser to distinguish humans from bots. See Cloudflare's privacy policy.

5. Recipients

Data is processed by our team and the following processors, bound by contract: our hosting provider (o2switch) and our email delivery provider. We never sell personal data.

6. Your rights

You may access, rectify, erase, restrict or object to the processing of your data, and request its portability. To leave the waiting list, use the unsubscribe link at the bottom of any email we sent you: your address is deleted immediately, and nothing of it is kept. To exercise any other right, write to contact@baguette-labs.fr. You may also lodge a complaint with your local data protection authority.

7. Security

Data is transmitted over HTTPS and stored on access-controlled infrastructure. Only authorised staff can access the back-office.

8. Changes

We may update this policy. The date at the top of this page indicates the latest version.