Privacy policy

Who handles your data

This site is published by Soro Nua, a digital communications agency based in Douala, Cameroon. Full publisher details are in the legal notice.

For any question about this text, or to exercise your rights, write to contact@soronua.com.

What we collect

The contact form

When you write to us we store what you type: your name, your email address, and then, depending on what you choose to fill in, your phone number, your company, the service you are interested in, a budget range and your message. We also store the site language and the page the message was sent from.

This is used to reply to you. It is not sold, not used for outbound prospecting, and not added to a mailing list.

Analytics

We measure traffic with a tool we wrote ourselves, running on our own server. There is no Google Analytics, no Meta pixel, and no third-party script anywhere on this site. The typefaces are self-hosted, so loading a page sends no request to any server but ours.

For each page view we record exactly this:

• the page path and the language shown;
• the hostname of the site that sent you here, never the full address;
• the device, browser and operating system family;
• the country, never the city;
• a visitor identifier computed as sha256(IP address + browser + daily salt), then truncated.

That identifier lets us tell that two pages were read by the same person on the same day. The salt changes at midnight UTC and the previous one is destroyed: the next day the same visitor produces a different identifier, and the two cannot be connected. That is a property of the calculation, not a promise from us.

Your IP address is never written to the database. It is used to compute the identifier and the country, then discarded. The events table has no IP address column.

If your browser sends a Do Not Track or Global Privacy Control signal, no beacon is sent at all.

On what basis

• Contact form — your own enquiry. You write to us for an answer and we process your data to give you one. For European visitors this is pre-contractual steps and legitimate interest (GDPR, article 6.1.b and 6.1.f).
• Analytics — our legitimate interest in knowing which pages are read (GDPR, article 6.1.f). Because nothing is stored on your device and no personal data is kept, this needs no consent from you, which is why the site shows no cookie banner.

How long we keep it

• Messages received through the form: 24 months, then deleted.
• Raw analytics events: 90 days, then permanently deleted.
• Aggregate counts by day, country and device type: kept, because they contain no personal data.

Who else has access

We do not sell or share your data for advertising. Four technical providers are involved, each for one reason:

• Supabase — hosts the database and the site's files. Form messages are stored there.
• Hostinger — hosts the application and serves the pages.
• Resend — delivers the email that tells us a message has arrived. Your message passes through it.
• Cloudflare — provides Turnstile, the anti-bot check on the contact form.

These providers host the data outside Cameroon. The database and the files are hosted by Supabase in the European Union (Frankfurt, Germany). Resend and Cloudflare operate from the United States and the European Union. No other transfer takes place.

Your rights

You can ask to see the data we hold about you, to correct it, to delete it, to receive a copy of it, or to object to it being processed. Write to contact@soronua.com and we reply within thirty days.

These rights come from Cameroon Law No. 2024/017 on the protection of personal data and, if you live in the European Union, from the GDPR. If our answer does not satisfy you, you can complain to the competent data protection authority: in Cameroon, the one designated by that law; in the European Union, the supervisory authority of the country you live in.

Cookies

The site uses no tracking cookies. The two cookies that do exist are described in the cookie policy.

Security

The site is served over HTTPS only. Access to the admin console is limited to a single account, protected by a hashed password and a signed session. Form messages can only be read from that console.

Changes

If this policy changes, the date at the top of the page changes with it. We do not retroactively change how data already collected is used.