Privacy
Last updated 13 September 2026
This is Steven Lorenz's professional site. It has no accounts and shows no advertising. Here is everything it does with information about you: the contact form, analytics if you accept them, and — in the last section — EdgeDesk, the private tool Steven uses to publish to his YouTube channels.
En bref, en français : le formulaire de contact n'envoie que ce que vous y écrivez, uniquement pour vous répondre, conservé au plus trois ans après notre dernier échange ; Google Analytics ne se charge que si vous l'acceptez. Vous pouvez demander l'accès, la correction ou la suppression de vos données à contact@stevenlorenz.com. Le détail suit, en anglais.
The contact form
When you send the form, the site receives what you typed — your name, your email address, and, if you gave them, your company, what you want built, your industry, what you describe, your team size and budget — plus the page's language and the time it was sent. Nothing else: no tracking, and your IP address is not stored with it.
It is used for one thing: to reply to you and discuss your project. It is kept on the server that runs this site (hosted by Railway, in the Netherlands), and emailed to Steven's inbox at contact@stevenlorenz.com — delivered by Resend, the email service (from its EU region), and forwarded by Cloudflare to Steven's Microsoft Outlook mailbox. It is also shown in Steven's own dashboard (EdgeDesk), on his computer. It is never sold or shared with anyone else, and never added to a mailing list.
It is kept for as long as the conversation needs it, and at most three years after the last exchange — or deleted sooner if you ask. The legal basis is your request: the steps you ask for before a possible contract.
Google Analytics — only if you say yes
If you choose Accept in the cookie banner, the site uses Google Analytics to count visits and see which parts are read. It records which pages are visited, roughly from where (country and city, worked out from your IP address, which Google Analytics does not store), on what kind of device and browser, and how the visit arrived. It never receives your name or email address.
It sets cookies named "_ga" and "_ga_" followed by an identifier, which last up to two years. The detailed visit data is kept by Google Analytics for two months. It is provided by Google Ireland Limited; data it transfers to Google LLC in the United States is covered by the EU-US Data Privacy Framework, under which Google is certified.
Until you accept, the Google Analytics script is not even loaded. Refuse is as easy as Accept, and you can change your mind at any time from (also at the bottom of every page); refusing afterwards stops Google Analytics and deletes its cookies. The legal basis is your consent.
Other services the page uses
- Google Fonts — the typefaces are loaded from Google's servers, which receive your IP address and browser details to deliver them. No cookies.
- YouTube (privacy-enhanced mode) — on the music page, the archive video is loaded from youtube-nocookie.com only when you press play. Until then nothing is sent to YouTube.
- Cloudflare Turnstile — on the contact form, a check that the person sending it is not a bot. Cloudflare receives your IP address and browser signals for that check and, it states, uses them for nothing else — no advertising, no tracking. The legal basis is the site's legitimate interest in keeping its inbox free of spam.
- Railway — hosts the site. Like any web server it sees your IP address when it serves a page.
Cookies
Only two kinds: the one that remembers your answer to the cookie banner (strictly necessary, one year), and the Google Analytics cookies above if you accepted them.
Your rights
You can ask what is held about you, have it corrected or deleted, and object to its use. Write to contact@stevenlorenz.com. If you are in France or elsewhere in the EU and think your data has been mishandled, you can complain to a supervisory authority — in France, the CNIL.
EdgeDesk and YouTube API Services
EdgeDesk is a private dashboard that runs on Steven Lorenz's own computer. It is not offered to the public and its only user is Steven; the only Google accounts connected to it are the ones that own his channels, SkyOiseau and Down to camp. EdgeDesk uses YouTube API Services, and by using it you agree to be bound by the YouTube Terms of Service. Google's own handling of your data is described in the Google Privacy Policy.
What it accesses. When a channel is connected through Google's consent screen, EdgeDesk is allowed to upload videos to that channel and manage them. It uses that to upload videos, set their title, description, thumbnail and whether they are private or public, and to read the channel's name, handle, subscriber and video counts, and the views, likes and comments of the videos it uploaded.
What it stores, and where. Only on that computer, in EdgeDesk's own database — never on this website or any other server: the token Google issues to renew access (encrypted), the channel's name and ID, the IDs of the videos it uploaded, and the view, like, comment and subscriber counts over time, so their history can be compared. The counts are kept while the channel stays connected; EdgeDesk renews its access with Google every time it reads them (hourly while it runs), so it learns straight away if that access has been withdrawn.
Sharing. None of it is sold, shared with anyone, or used for advertising. Videos and their details are sent only to YouTube, to publish them. No third party serves content or advertising inside EdgeDesk.
Cookies and device data. EdgeDesk sets one cookie on that computer to keep its owner signed in to it. It does not track anyone.
Removing access. You can revoke EdgeDesk's access to a Google account at any time from Google's security settings page. When access is revoked, or on request, the stored token and everything EdgeDesk holds about that channel is deleted within 7 days.
Questions. Write to contact@stevenlorenz.com.