サトスメSatosume

Privacy

You're probably here before leaving your address. Good instinct. Here's what gets kept when you join the waitlist, where, for how long, and how to have it all erased.

What is kept

Five things, and not one more. Three come from the form; the two dates are produced by the service that keeps the list — which is exactly what makes them impossible to falsify on our side.

  • Your email address — that's where the confirmation link goes, then the launch news. It serves no other purpose.
  • Your first name — to write it at the top of the email. Put whatever you want to read there.
  • The date and time of your request — the first half of the proof of your consent.
  • The date and time of your confirmation — the second half: the moment you clicked the link received by email.
  • The version of the text you read when signing up — every wording is archived and dated in the site's code. That's what makes it possible to say, two years from now, exactly what you said yes to.

What it's for

To let you know when Satosume opens. That's all you asked for, and that's all that will be done with it: your address is sold to no one, goes to no partner, and feeds no other mailing.

On what basis

Your consent, nothing else. You give it in two steps: by leaving your address, then by clicking the link that arrives by email. Without that second click, your sign-up doesn't exist and you'll receive nothing.

Where it lives

With Brevo, a French company whose data is hosted in the European Union. Brevo keeps the list, sends the emails and handles unsubscribes. No one else has access to the list, and no copy of it exists anywhere else.

When you submit the form, what you typed transits through the site's server on its way to Brevo. It doesn't stay there, and the request body is never logged. On that leg, your IP address is not passed along: the server strips the headers that carry it before relaying. When you later click the confirmation link, your browser connects directly to Brevo, which then sees your IP address — that's what lets it timestamp your confirmation.

For how long

Three years from your last sign of life: your sign-up, or a click in an email. After that, the address is deleted. Sooner if you ask.

What you can ask for

Write to privacy@satosume.com. No account to create, no form, no proof to provide. An answer within a month at most — in practice much faster.

  • Know what is kept — the five items above, as recorded.
  • Correct — a mistyped address, a misspelled first name.
  • Erase — everything, with no justification needed.
  • Take away — the same items in a file you can reuse elsewhere.
  • Freeze processing (GDPR article 18) — the data stays but nothing more is done with it while a question gets settled.
  • Withdraw your consent (GDPR article 7.3) — as simple to undo as it was to give: one email, and everything is erased. Unsubscribing is different: one click on the link at the bottom of every email.
  • Lodge a complaint — with the CNIL, the French authority, at www.cnil.fr. From another EU country, with your own country's authority.

How visits are counted

With a self-hosted analytics tool, cookie-free and free of personal data: page views, not people. Nothing is written to your browser — which is why there's no banner and no consent pop-up: there's nothing to consent to. The script is served from analytics.keikolab.dev, a server run by the site's publisher; like any server your browser contacts, it sees your IP address. It's the only script on this site that comes from anywhere else.

Who answers for this data

M.E.A CONSULTING, of which Satosume is a brand — the full identity (legal form, registered office, registration) is on the legal notice page, one click away. For your data: privacy@satosume.com. For everything else: bonjour@satosume.com.

This page has been in force since September 7, 2026. Previous versions live in the site's code history.