Privacy & legal.

Who runs this site

This website (taoufiqlotfi.com) is operated by Taoufiq Lotfi, an individual based in Morocco / Moldova. For any privacy request, contact admin@taoufiqlotfi.tech.

What this notice covers

This notice explains what personal data this site processes, why, on what legal basis, and the rights you have over it. It applies to every page of the site.

Where the site runs

The site is served from Cloudflare's edge network (Cloudflare, Inc.) at taoufiqlotfi.com and taoufiqlotfi.tech. Cloudflare processes connection data (IP address, request headers) as a hosting processor to deliver the pages and protect them from abuse.

Analytics, web vitals, heatmaps, and error tracking

This site uses PostHog (PostHog Cloud EU, hosted on EU-based servers in Frankfurt) to understand how visitors use the site. Requests to PostHog travel through this site's own domain. The following run under the legal basis of legitimate interest (understanding and improving the site, and measuring which channels bring visitors):

• Product and web analytics — page views and clicks (autocapture), with all form inputs masked.
• Conversion and attribution events — clicks on the "hire me" and "build my MVP" calls to action and the booking link, plus marketing campaign parameters (UTM tags) so visits can be attributed to a source. Other URL parameters and identifying values are stripped before storage.
• Web vitals — page loading and responsiveness measurements, so the site stays fast.
• Heatmaps — aggregate click, scroll, and rage-click patterns on pages.
• Error tracking — uncaught JavaScript errors, with email-shaped and token-shaped values stripped from error messages.

Cookies and the cookie banner

By default this site stores a first-party PostHog identifier in a cookie and in your browser's local storage, so that return visits can be recognised and attributed to their source. A cookie banner shown on your first visit explains this and lets you reject it.

If you reject, the site switches to cookieless mode: nothing is stored on your device, and PostHog counts you with a non-persistent, daily-rotating identifier derived on its servers — it cannot recognise you across days or sites. You can change your choice at any time via the "Cookies" control in the footer of every page. Your choice itself is remembered in local storage so you are not asked again.

Session recording

Session recording (replaying an anonymized reconstruction of a visit) runs under the same legitimate-interest basis as the analytics above whenever cookies are accepted or no choice has been made. All form inputs are masked before anything is captured. Rejecting cookies turns session recording off. If you would like recordings associated with your visit deleted, email admin@taoufiqlotfi.tech.

Booking a call

The "book a scoping call" link opens a third-party scheduling tool. When you use it, that tool processes the information you enter (such as your name, email, and chosen time) as a separate data processor under its own privacy terms. The conversion event for the click is recorded on this site before you leave; the scheduling itself happens on the third party.

Data retention

Analytics and attribution data are retained for a limited period and then deleted or aggregated. Session recordings are retained for a limited review window and then deleted.

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and to data portability. To exercise any of these, email admin@taoufiqlotfi.tech. You also have the right to lodge a complaint with a supervisory authority.

Legal notice (Impressum)

Responsible for content: Taoufiq Lotfi. Contact: admin@taoufiqlotfi.tech.