Privacy

Last updated: 19 August 2026 · Controller: Bodin Creative Lab (see the legal notice)

Data we store

Your account: an email address, a password stored as a salted hash (PBKDF2-SHA256, 200,000 iterations; we cannot read it), the name of your atelier, and your answers to the signup questionnaire. If you fill in billing details (company name, address, VAT number), they are kept with the account and erased with it.

Your atelier: the raw materials, prices, stock, formulas, trials, accords, batches and notes you record. Each atelier lives in its own database file.

Publishing a formula copies its name, your atelier, the brand, the pyramid and your note to a public page. You see the full page before it goes out; revoking it removes the page.

How we use it

We use it only to run the service: no advertising, no trackers, no resale, no profiling. The only cookie is the session that keeps you signed in.

Legal bases (GDPR). Your account and atelier data are processed to perform our contract with you. Photo reading and L'Esquisse run only when you trigger them. Sign-in throttles and server logs rest on our legitimate interest in keeping the service safe.

Photo reading. When you use it, the photo you submit is sent to Anthropic (Anthropic PBC, USA) to be transcribed into structured text, and the transcription comes back to your atelier.

L'Esquisse. When you open a conversation, your messages travel to Anthropic together with your Orgue's inventory (material names, families, stages) and the names of your accords. Nothing else is attached: your quantities, formulas and costs are never sent. The conversation lives on your screen: we store no transcript, only the conversation count, the model used and its token cost.

Photo reading, L'Esquisse and payment are the three moments any of your data leaves the European Union for the United States, and each happens on your action only. The Anthropic transfers are covered by its data processing addendum, which incorporates the European Commission's Standard Contractual Clauses.

Emails. Blottoir sends two kinds of email. Service emails (sign-up, password reset, billing, plan changes) follow from the contract and cannot be turned off. Milestone and reminder emails (your first formula, a quiet atelier) are optional: every one carries an unsubscribe link, honoured in one click, and at most one arrives per week. All email leaves from noreply@blottoir.com. These emails are built from the COUNTERS of your atelier snapshot only: number of materials, number of formulas, date of your last action. No other data is read. Sending goes through Infomaniak (Switzerland), our email provider. The sending log (recipient, email key, date) is kept three years as proof of compliance.

Payment. When you subscribe, Stripe (Stripe, Inc., USA) processes your payment: your card details and billing address go to Stripe directly and never reach our servers. We store only your Stripe customer and subscription identifiers, to know which plan is active. Stripe's own privacy policy governs that data.

The materials survey. To maintain the shared materials directory and watch the service's health, Blottoir reads, several times a day, a SURVEY from each atelier: material names, suppliers, families and price statistics (median, minimum, maximum per kilo), plus counters (number of materials, formulas, trials, and the date of your last action) and the total book value of your wall. Quantities, formulas, accords and trials are never part of it: the survey cannot contain a recipe. Material and supplier names appear in the shared directory even when a single atelier holds them; if a material name is itself confidential, name it privately and it stays out of the shared directory's reach. The operator's dashboard shows these counters and values per atelier.

Blottoir's publisher is established in Switzerland, which the European Commission recognises as offering an adequate level of data protection. Your data being administered from Switzerland therefore needs no further safeguard. For matters under the EU General Data Protection Regulation, the publisher's representative in the European Union (art. 27 GDPR) is ATELIMAP, France, reachable at contact@jimmybodinparfums.com.

MaquetteZero™ briefs. Each brief you run (pyramid, names, pasted reviews, result) is recorded in your atelier's database.

MaquetteZero™ learning. The engine does not learn from your work. Your briefs, your trials and your formulas stay in your atelier and are never gathered anywhere. When you save a trial, you score the proposal against your brief; the score is stored with it in your atelier's database. The score is a number only.

Published pages

When you publish a formula, the page carries exactly what you saw before publishing: the formula's name, your atelier's name, the pyramid notes, your optional note, and, if you ticked the box, the client brand. Ingredients, quantities and costs never enter it.

A published page is public: anyone holding the link can open it, and if you allowed search engines, they may list it. Withdrawing the page removes it immediately on our side. Copies already shared elsewhere may remain. Server logs for public pages keep neither the link nor the reader's full address.

Server logs. The web server keeps access logs (IP address, URL, date) for at most 30 days, for security and abuse prevention (legitimate interest). They are then deleted by rotation.

Security

Connections are TLS only. Passwords are stored as salted hashes we cannot reverse, and session tokens are stored hashed and expire. Each atelier is a separate database file, and sign-in attempts are throttled.

Retention

Your data is kept for as long as your account exists, on servers in the European Union (Hetzner, Germany). Backups are taken every night and every fifteen minutes, and a copy is held outside that server. Backups are kept at most 60 days. After you delete your account, every backup copy is gone within 60 days. Published pages are removed when you withdraw them or delete your atelier; backups follow the same 60-day limit.

Your rights

You can delete your atelier yourself: My Account → Delete my atelier. This erases your account, your sessions and your atelier's database file.

Under the GDPR you can ask for access, a copy of your data, rectification, erasure, restriction, or object to a processing: contact@jimmybodinparfums.com. You can also lodge a complaint with your local data protection authority (in France, the CNIL, cnil.fr).

Children

Blottoir is a professional tool. It is not directed at children, and we do not knowingly hold a child's account.

Changes to this page

When this page changes, the date at the top changes with it. Material changes are announced on the site before they apply.