The keeping of records

Form L-2 · Privacy notice · Politique de confidentialité · Est. 1958

Read this first. This is the Office's privacy notice. It is written in the Office's voice and it is entirely accurate: every field, period and recipient below was read off the code that runs this site, not drafted from a template. Where the Office does not know something it says so, in orange, rather than guessing. There is at present nothing so marked on this page.

The short version, since the law likes a short version: the Office sets no cookies, runs no analytics, and has never sent an e-mail. If you never press Put me on the list, the Office holds nothing about you at all.

Article I — Who is responsible

Data controller: Château d'Artois Productions, SASU — 79 rue d'Artois, 59000 Lille, France · RCS Lille Métropole 995 093 176. The publisher named in the legal notice.
Representative: Tristan Bessudo, directeur de la publication
Data protection officer: None appointed. One is not required at this scale, and the Office declines to invent a post it cannot fill.
Requests: By post, to the registered office above. The Office answers within one month. An electronic address follows once a domain exists.

Article II — What the Office does not hold

This article is longer than the next one, which is the point.

Your name. You type it into the Waiver. It stays in your browser's memory and on the certificate you download. It is never transmitted.
Your signature. Drawn or typed, it is rendered on your own device and never sent.
Your Member number. Generated on your device. The Office does not keep a register of Members, because there are none.
Cookies. None are set. There is no cookie banner because there is nothing to consent to.
Local storage. Nothing is written to it. Reload the page and the Waiver starts again, which the Office considers character-building.
Analytics, advertising, tracking pixels, third-party scripts. None, anywhere.
Profiling or automated decisions. None. No decision is taken about you by machine, because no decision is taken about you at all.

The first three are not promises of good behaviour. They are properties of the code: an automated test inspects every request the Waiver makes and fails the build if a name, a signature or a Member number ever appears in one.

Article III — What the Office does hold, and why

Record	Fields	Lawful basis	Kept for
Waitlist	e-mail address · chosen Signal · price answer · the consent wording and its version · the timestamp · that you stated you are 18+	Consent (GDPR art. 6(1)(a)), given by two unticked boxes	Until the one promised e-mail is sent, or you ask for erasure, or the project is abandoned
Price vote without an e-mail	chosen Signal · price answer — no identifier of any kind	Legitimate interest (art. 6(1)(f)): finding out whether to make a thing. It is anonymous, so it barely engages the Regulation at all	Indefinitely, being anonymous
The doorman	a salted one-way hash of your IP address, with a salt rotated daily	Legitimate interest: stopping one person from submitting ten thousand times	One day, then the salt changes and the hash means nothing
Wave Radar presence	coordinates rounded to four decimals · a minute bucket · a temporary salted peer hash	Consent: the browser asks, and you press Start Patrol	120 seconds
Wave Radar handshakes	which two temporary peer hashes waved	Consent, as above	30 seconds

The Radar refuses any position vaguer than fifty metres, on the grounds that it is not evidence. It runs only while the page is open, and stops itself after ten minutes.

Article IV — Who else sees it

Host and processor: Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, United States — Cloudflare Pages, Workers KV and D1
Mailing provider: None. There is no mailing.
Advertising partners: None.
Anyone else: Nobody. Nothing is sold, rented, shared or lent.

Transfers outside the EEA

Cloudflare is established in the United States and operates a global network, so a record may rest on a machine outside the European Economic Area. Those transfers are governed by the Cloudflare Data Processing Addendum, version 6.4, effective 3 April 2026, which incorporates the EU Standard Contractual Clauses — in that document's own words, “the contractual clauses annexed to the European Commission's Implementing Decision 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of Personal Data to third countries”.

The Office quotes that from Cloudflare's published addendum rather than from memory. An earlier draft of this notice promised to do exactly that before the site opened, and the Office is pleased to report that it kept its word, which it concedes is not the usual practice.

Article V — Your rights, which the Office concedes

You may require the Office to show you what it holds, correct it, erase it, restrict its use, hand it to you in a portable form, and you may object. You may withdraw consent whenever you like; withdrawing it does not unmake what was lawful before.

Write to the contact above. The Office answers within one month, as the law requires, and considers this generous of the law.

If the answer displeases you, complain to the CNIL (3 place de Fontenoy, 75007 Paris, cnil.fr) or to the authority where you live. Decisions of the CNIL are final and may not be appealed to the Office.

A note on erasure, which is easier here than elsewhere

Ask, and the Office deletes the record. It cannot restore it afterwards and will not pretend otherwise. If you gave a price answer without an e-mail address, there is nothing to find and nothing to delete: the Office does not know which answer was yours, and this is deliberate.

Article VI — On persons under eighteen

The Office asks you to state that you are 18 or over before it records anything, because the film is not for children. The Office does not knowingly hold a record for a child. If you believe it does, write, and the Office will delete it and apologise in writing, which it does not enjoy.

Article VII — Screening for an impact assessment

The Office has considered whether a data protection impact assessment is required under art. 35, and records its reasoning so that the question cannot be said to have been ignored:

Location data is involved, which argues for one.
Against: it is coarse (four decimals), pseudonymous, retained for two minutes, never linked to an identity, collected only while a page is open and only after an explicit press, at a volume of a handful of people, and used for no decision about anybody.
Conclusion: no large-scale systematic monitoring, so no assessment is required at this scale. This conclusion is the Office's own and has not been reviewed by a lawyer. It is revisited before any public launch, and immediately if the Radar is ever used by more than a handful of people at once.

Article VIII — Amendments

If this notice changes in a way that matters, the change is dated here and — where consent is affected — asked for again rather than assumed. The wording you agreed to is stored with your record precisely so that it can be produced later.

This version: Drafted 16 September 2026. Not yet in force: the site is not public.
Completed: 16 September 2026 — the controller's full particulars and the named transfer instrument, both of which had been left blank rather than guessed.
Consent wording in use: waitlist-draft-2026-09-15