Legal notice and privacy.

Publisher

This website is published by ROCKET.PM.

Hosting

This site and its assessment tool (app.rocket.pm) are hosted on a server operated by OVH SAS, 2 rue Kellermann, 59100 Roubaix, France, +33 9 72 10 10 07, ovhcloud.com.

Intellectual property

The texts, visuals and tools on this site, including the content drawn from From Product to Profit, are the property of Mathieu Seguy unless stated otherwise. Company names belong to their owners and are shown to describe past and current work.

Privacy policy

This policy explains what personal data rocket.pm collects on this website and in its assessment tool (app.rocket.pm), why, how long it is kept and how to exercise your rights. It applies under the EU General Data Protection Regulation (GDPR) and the French Data Protection Act.

Data controller

ROCKET.PM, single-member limited liability company (EURL), 28 boulevard de la République, 13100 Aix-en-Provence, France, represented by Mathieu Seguy. Contact for any privacy question: mat@rocket.pm.

What I collect, and why

• When you write to me (by email, or with the contact form, which opens your own email app): your name, email address and whatever you choose to include in your message. Purpose: answer your request. Legal basis: my legitimate interest in replying to you, and steps taken at your request before a contract.
• When you enter your email on this site (to read the rest of an article or the detailed reading of the Quick assessment, or to be told about a release such as the book or team workspaces): your email address, the page where you signed up, your language, the exact text of the box you ticked and when, the date you confirmed, and a non-reversible fingerprint of your IP address (to block abuse). Purpose: unlock the content you asked for and send you new rocket.pm articles; for a release list, send you that announcement and nothing else. Legal basis: your consent, given by ticking the box. It unlocks the content as soon as you send the form; new articles are only sent after you click the link I email you (double opt-in). You can withdraw it at any time with the one-click unsubscribe link in every email. This list is kept in the assessment tool's database; no mailing service other than Resend is involved.
• When you use the assessment tool: the name, email address and profile picture sent by Google when you sign in (I receive nothing else from your Google account), your onboarding answers, your ratings and the optional evidence you add, your snapshots, experience points, badges and quests, your language and email preferences. Purpose: provide the tool and keep your progress. Legal basis: the performance of the terms of use you accept when you create your account.
• Public sharing: if you create a share link for your skill map, anyone with the link can see that map. You can revoke the link at any time.
• Anonymous benchmarks: the tool may compare your scores with aggregated, anonymous statistics. These are only shown above a minimum number of participants and never identify anyone.
• Audience measurement, only if you accept it in the cookie banner: pages viewed, clicks on the assessment buttons, whether an email form was sent (never the address itself), approximate location (country, city), device and browser type, through Google Analytics 4. Purpose: know which pages are useful and improve the site. Legal basis: your consent, which you can withdraw at any time (see Cookies).
• Technical data: the server keeps short technical logs (IP address, date, requested page, browser) to keep the service secure and working. Legal basis: legitimate interest.

I do not sell your data, I do not use it for advertising and I do not make automated decisions that affect you.

Who processes it

• OVH SAS (France): hosting of the website, the tool and its database (including the email list), in the European Union.
• Google (Google Ireland Ltd and Google LLC): sign-in with your Google account, under Google's own privacy policy.
• Google (Google Ireland Ltd, as processor): audience measurement with Google Analytics 4, only if you consent. Data may be transferred to Google LLC in the United States, under the European Commission's adequacy decision for the EU-US Data Privacy Framework (Google LLC is certified) and standard contractual clauses.
• Resend (Resend Inc., United States): sending emails: the tool's emails (reminders, progress summaries) when they are enabled, and the email list's messages (confirmation links, new articles). Transfers outside the EU rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework or on standard contractual clauses.

No one else has access to your data, apart from authorities where the law requires it.

How long it is kept

• Messages you send me: up to three years after our last exchange.
• Email list: until you unsubscribe, then deleted (within 24 hours). An address that is never confirmed is deleted 30 days after the link was sent.
• Assessment account: as long as your account exists. You can delete it at any time from the tool's settings; your ratings, snapshots and share links are then deleted. Accounts with no activity for three years are deleted.
• Technical logs: a few weeks at most. Database backups: fourteen days.

Your rights

You can ask to access, correct, delete or export your data, to restrict or object to its processing, and withdraw your consent at any time, by writing to mat@rocket.pm. I answer within one month. You can also file a complaint with the CNIL (cnil.fr), the French data protection authority.

Security

Data is encrypted in transit (HTTPS). The database is not reachable from the internet, access to the server is restricted to key-based administration, and each user can only read their own data.

Cookies

This site stores a few small files (cookies) and local storage entries in your browser. Those that are strictly necessary are always active; audience measurement is only switched on if you accept it. Until you choose, nothing is set for measurement and Google is not contacted.

Strictly necessary (always active)

• Your cookie choice: the rocketpm-consent entry in local storage records what you chose, when, and the version of this notice. Kept 6 months, after which I ask again.
• Unlocked content: when you send your email to unlock an article or a reading (and again if you click the confirmation link), two cookies, kept one year, with no personal data: rocketpm_unlocked (value 1; the same flag is also kept in local storage) remembers that the content is unlocked in this browser, and rocketpm_unlock_sig (a date and a signature, not readable by the page's scripts) lets the server check it before sending the rest of an article.
• Quick assessment: your answers are kept in local storage so you find your result again; they are never sent.
• Assessment tool (app.rocket.pm): your sign-in session, and your language choice (kept one year).

Audience measurement (only with your consent)

If you accept, Google Analytics 4 measures how the site is used: pages viewed, clicks on the assessment buttons, email forms sent, approximate location, device and browser. Purpose: know which pages are useful and improve them. It sets the cookies _ga (tells visits apart) and _ga_<ID> (keeps the session state), kept 13 months at most. Measurement data is kept in Google Analytics for 14 months at most.

It runs with Google Consent Mode, advertising storage and ad personalisation denied, and Google signals switched off: no advertising, no cross-site profile. Google Analytics 4 does not log or store IP addresses. Google Ireland Ltd acts as my processor; data may be transferred to Google LLC in the United States under the EU-US Data Privacy Framework (adequacy decision of the European Commission) and standard contractual clauses.

Changing your mind

Withdrawing is as simple as accepting: use Manage cookies, at the bottom of every page, then “Reject all” or switch off audience measurement. Measurement stops at once and the _ga cookies are deleted. Your choice, accept or reject, is remembered 6 months. You can also delete all of these from your browser at any time; you will then be signed out, the content locked again, and asked for your choice again.

Last updated: 21 October 2026