Architecture & data flows
Last updated: July 17, 2026
This page documents, transparently, how Zarev is built and which data goes where. Zarev is an AI-intelligence pipeline running on its author's machine, a database hosted in the European Union, and this website — a training catalogue and a newsletter. Nothing else.
Data flow
Content (digests, newsletter, knowledge base, training pages) is produced locally and published to the database. The website only reads it — public reads are limited by row-level security (RLS): only active trainings and published archives are visible.
┌──────────────────────────────────────┐
│ PIPELINE DE VEILLE (poste local) │
│ │
│ YouTube · GitHub releases · RSS · │
│ X/Twitter · Instagram │
│ │ collecte + tri + synthèse │
│ ▼ │
│ digest quotidien · knowledge base │
└───────────────────┬──────────────────┘
│ HTTPS / TLS
▼
┌──────────────────────────────────────┐
│ SUPABASE EU (Francfort) │
│ │
│ digests · newsletters · knowledge │
│ formations (catalogue + modules) │
│ leads formations (IP hashée) │
│ feedback newsletter (IP hashée) │
└───────────────────▲──────────────────┘
│ RLS (lecture publique limitée)
│
┌───────────────────┴──────────────────┐
│ SITE zarev.dev (Vercel) │
│ │
│ catalogue /formations + devis │
│ newsletter (double opt-in, Resend) │
│ archives publiques │
└──────────────────────────────────────┘The data we collect
Three cases, and only three:
- Newsletter signup: your email address, confirmed via double opt-in (sent through Resend). It is used solely to send you the newsletter.
- Training quote request: name, email, company (optional) and message — forwarded to the author and stored for sales follow-up. Your IP address is never stored in clear text: only a SHA-256 fingerprint, used against spam.
- Newsletter feedback votes (👍 / 🤔 / 👎): the vote and a SHA-256 fingerprint of the IP, nothing else.
No ad tracking, no third-party cookies, no invasive analytics, no resale.
Guarantees
- No raw IP address is ever persisted — only SHA-256 fingerprints with a rotatable secret.
- Database hosted in the European Union (Supabase, Frankfurt).
- No data shared with or sold to third parties.
- Operational right to erasure: one-click unsubscribe for the newsletter, deletion on request for leads.
Going further
- The security page details the technical measures.
- The privacy policy details your GDPR rights.
- Vulnerabilities can be reported via the repository's SECURITY.md.