Privacy policy
In short: your trips stay private, nothing is sold, no ads; only anonymous audience measurement, hosted by the publisher, counts visits. You can export or delete everything yourself, at any time.
Data controller
Julien Mousqueton, publisher of the site (see the legal notice). Contact: julien_@_mousqueton.io
Data processed, purposes and legal bases
| Data | Why | Legal basis |
|---|---|---|
| Email address, password (stored only in hashed form), language, theme, home city if you set one | Create and secure your account, send you sign-up and reset links, calculate your days away | Performance of the service you request |
| Trips (places, dates, modes of transport), journeys, notes, tags, photos | Show your map, statistics and year in review | Performance of the service you request |
| Share links and calendar subscription address (secret tokens), date a link was last viewed | Share your trips with the people you choose, add your trips to your calendar | Performance of the service you request |
| Web server logs: IP address, date, page requested, browser | Service security, detecting abuse and outages | Legitimate interest (security) |
| Audience measurement (Matomo): pages viewed, referring page, browser, operating system, screen size, truncated IP address, approximate country | Count visits and learn which pages are useful, to improve the site | Legitimate interest (anonymous statistics, exempt from consent) |
Photos are re-saved on upload: their metadata (including GPS location and camera model) is removed. Notes, photos, home and email address never appear on share links; upcoming trips only appear there if you chose that for the link.
Who can access your data
Only the publisher, as technical administrator of the server, can access it. It is never sold, rented or transferred. Some third-party services are, however, involved in running the site:
- Place search: the text you type is sent by our server to the OpenStreetMap Foundation's Nominatim service. Your IP address is not passed on to it.
- Base maps: your browser downloads the map tiles from tile.openstreetmap.org, which therefore receives your IP address.
- Audience measurement: your browser sends the pages you view to the publisher's Matomo instance (stats.mousqueton.io), which therefore receives your IP address and truncates it before storing it. Secret tokens in share, sign-up and password reset links are masked before sending. These statistics are never matched with your account or shared with anyone.
- Libraries and fonts: your browser downloads them from jsDelivr, cdnjs (Cloudflare) and Google Fonts, which receive your IP address.
- Calendar: if you enable the subscription, your calendar service fetches your travel dates and places (without notes) from the secret address you give it.
- Share links: anyone who has one of your links sees the trips it shows. You can revoke a link at any time.
Emails are sent directly by our server. The site and its data are hosted in Gravelines, France.
Retention periods
- Account and content: for as long as your account exists. Deleting your account immediately erases your data and photos from the site.
- Backups: copies are made every night and kept for at most 14 days, so your data disappears from them at the latest 14 days after it is deleted.
- Web server logs: 52 days.
- Audience measurement: 25 months at most.
- Place search cache (not linked to your account): 30 days.
- Links sent by email: 15 minutes for sign-up, 60 minutes for password reset.
Cookies and local storage
The site uses no advertising cookies. The items it stores are needed for it to work, remember your choices, or serve anonymous audience measurement limited to this site, meeting the CNIL's exemption conditions; they therefore do not require consent:
session— keeps you signed in and protects forms (session cookie).remember_token— only if you tick “Keep me signed in”: signs you back in automatically (365 days).lang— remembers your chosen language (1 year)._pk_id,_pk_ses— Matomo audience measurement: tells visits apart without identifying you (13 months and 30 minutes).- Browser local storage: light or dark theme, map layers shown, draft of a trip being entered. This data never leaves your device.
You can opt out of audience measurement: the site will then stop counting you in this browser (a cookie remembers this choice).
Security
Encrypted connection (HTTPS), hashed passwords, limits on sign-in attempts, other sessions signed out when the password changes, daily backups.
Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability over your data. Most can be exercised directly in the application:
- Access and portability: the Import / export page (CSV, GeoJSON, GPX) or a full backup with your photos (.zip).
- Rectification: edit your trips, journeys and preferences at any time.
- Erasure: Preferences, then “Delete my account”.
For any other request, write to the contact address above. You can also lodge a complaint with the CNIL (the French data protection authority): cnil.fr.
Last updated: Oct 25, 2026