Skip to content
The Blue Economy

Personal data

Privacy policy

What this site collects, why, with whom, for how long, and how to take back control.

Last updated: 25 September 2026.

1. Data controller

The data controller is BLUE EDUCATION, a simplified joint-stock company with a share capital of 1,000 euros, SIREN 909 787 236, whose registered office is at 14 passage de la Moutarde, 01510 Virieu-le-Grand, France.

Any request regarding your data may be sent to contact@blue-education.org. Full details about the publisher are set out in the legal notice.

BLUE EDUCATION has not appointed a data protection officer. The contact point for any question about your data is contact@blue-education.org.

2. Audience measurement, without cookies

Traffic on this site is measured with PostHog, hosted in the European Union, on eu.i.posthog.com.

For an anonymous visitor, no cookie and no identifier is stored on your device: measurement data is kept in memory only, for the duration of your visit. There is no session recording, no individual profile and no advertising tracker.

That is why this site displays no cookie consent banner. During ordinary browsing, there is nothing to consent to.

3. Newsletter and ecosystem account

The sign-up form, in the footer and in the welcome window, collects your email address, your first name and your country. The country determines the language of the emails you receive.

An optional checkbox lets you allow your email address to be recorded and personalise your experience across the ecosystem: map, fables, shop and community.

Sign-ups are sent to Resend, which delivers the emails and manages the audience, and to the Blue Education CRM, hosted on Supabase in the European Union.

If you tick the personalisation box, audience measurement switches to identified mode: a cookie is set on the .theblueeconomy.org domain, your activity is linked to your account, and session recording is enabled. Without that box, none of this happens.

Sign-up currently works as a single opt-in, with no confirmation email. You can unsubscribe at any time using the link in every email, or by writing to contact@blue-education.org.

4. Wiki contributions

The wiki contribution form collects your message, the type of contribution and the URLs of your sources. Your name and email address are optional.

Contributions are stored in a Supabase database hosted in Frankfurt, region eu-central-1, and reviewed before any publication.

5. Shop

The shop cart is handled server-side by Shopify. Your name, delivery address and payment details are entered on the Shopify checkout, outside this site: the Shopify privacy policy then applies to that data.

6. Legal bases

Depending on the processing concerned, we rely on:

  • your consent, for newsletter sign-up and for personalising your experience
  • performance of the contract, for an order placed in the shop
  • the legitimate interest of Blue Education, for anonymous audience measurement, moderation of contributions and site security
  • compliance with a legal obligation, for data the law requires us to keep

7. Retention periods

  • Contact and sign-up data: 3 years after the last contact
  • Technical logs: 12 months

8. Recipients

Your data is intended for Blue Education. Depending on the path you take, it may be passed to the following processors, strictly within the scope of their assignment:

  • Resend, for sending emails and managing the audience
  • Supabase, for the CRM and for wiki contributions, in the European Union
  • PostHog, for audience measurement, in the European Union
  • Shopify, for the cart, the order and the payment
  • Vercel, for hosting the site
  • Google, for the YouTube video players embedded in some wiki entries

Your data is never sold, rented or transferred to third parties for commercial purposes.

9. Transfers outside the European Union

Some providers are companies established outside the European Union. The resulting data transfers are governed as follows:

  • Vercel Inc., United States, hosting: pages are served from Frankfurt. Vercel Inc. is certified under the EU-U.S. Data Privacy Framework and its data processing agreement provides for the European Commission's standard contractual clauses (decision 2021/914)
  • Resend, company PLUS FIVE FIVE, United States, email sending and audience management: certified under the EU-U.S. Data Privacy Framework; its data processing agreement also provides for the standard contractual clauses
  • Supabase Inc., United States: the databases used by the site are hosted in the European Union. Its data processing agreement commits to storing data in the chosen region and governs any transfer with the standard contractual clauses
  • PostHog Inc., United States: audience measurement data is hosted on PostHog Cloud EU, in Frankfurt. PostHog is certified under the EU-U.S. Data Privacy Framework and its data processing agreement provides for the standard contractual clauses
  • Shopify: the contracting party for European merchants is Shopify International Limited, in Ireland. Transfers to its parent company in Canada rely on the European Commission's adequacy decision for Canada, transfers within the group on binding corporate rules approved by European authorities, and transfers to its providers on the standard contractual clauses
  • Google LLC, United States: videos embedded in the wiki are played from youtube-nocookie.com. When a player loads, your IP address is sent to Google. Google LLC is certified under the EU-U.S. Data Privacy Framework

You can obtain information about these safeguards by writing to contact@blue-education.org.

10. Your rights

Under the General Data Protection Regulation, EU 2016/679, and the French Data Protection Act of 6 January 1978 as amended, you have the following rights:

  • right of access
  • right of rectification
  • right to erasure
  • right to restriction of processing
  • right to data portability
  • right to object
  • right to set instructions on what happens to your data after your death

To exercise them, send a written request to contact@blue-education.org. Proof of identity may be requested if there is any doubt about the author of the request.

You may also lodge a complaint with the French data protection authority, the CNIL, at www.cnil.fr.

11. Security

Blue Education implements appropriate technical and organisational measures to protect your data against unauthorised access, loss and disclosure.

12. Changes

This policy may be amended to remain compliant with applicable law and to reflect how the site evolves. We invite you to review it regularly.

Read the legal notice