Privacy policy

Data controller

Aurore GAUCHER (WEBag Solutions), 18 rue des 2 Fontaines – 52700 Ozières, France. For any question about your data: privacy@foodspotter.app.

What we collect, why, and for how long

The list below sets out each category of data, its purpose, its legal basis and its retention period.

• Email address, username, encrypted password — to create and manage your account. Legal basis: performance of the contract. Retention: for the life of the account, with deletion after two years without a login, preceded by a reminder message.
• Geographic position — to show spots near you. Legal basis: your consent. Retention: none, the position is used at the moment of the search.
• Suggested spots, reviews, photos, reports — to feed the community map. Legal basis: performance of the contract. Retention: for the life of the account; published contributions remain visible in anonymised form.
• Favourites, filters, language, theme — to remember your preferences. Legal basis: performance of the contract. Retention: for the life of the account.
• Connection logs, including IP address and date — for security and abuse prevention. Legal basis: legitimate interest. Retention: six months.
• Messages sent through the forms — to answer your request. Legal basis: legitimate interest. Retention: twelve months after our reply.
• Purchase identifier and billing history — to manage your purchase and keep our accounts. Legal basis: performance of the contract and legal obligation. Retention: ten years.
• Pages viewed and audience measurement — to understand how the site is used. Legal basis: legitimate interest. Retention: thirteen months.

Optional fields are marked as such when you fill them in. Only the email address and the password are required to create an account.

You can use FoodSpotter without an account: browsing the map, searching and suggesting spots remain available without registering.

Location data

FoodSpotter asks for access to your position in order to show nearby spots. This access is optional: refusing it leaves the service fully usable, searches then being made by entering an address. The permission can be withdrawn at any time in your device or browser settings.

Your position is neither stored on our servers, nor linked to your account, nor passed on to third parties. It is used solely to calculate distances, at the moment you run the search.

Who your data is shared with

We do not sell any data. We rely on the following providers, strictly for the purposes described.

• OVH, in France — hosting of all data. No transfer outside the European Union.
• Brevo, in France — sending the service's emails. No transfer outside the European Union.
• Google, in Ireland and the United States — sign-in with a Google account.
• Stripe, in Ireland and the United States — payment for professional plans.
• Umami, which we host ourselves in France — audience measurement. No transfer outside the European Union.

Transfers outside the European Union: the providers marked above may process data in the United States. Such transfers are governed by the European Commission's standard contractual clauses and, where applicable, by the EU–US Data Privacy Framework.

We may also disclose data at the request of a duly authorised judicial or administrative authority.

Purposes, legal bases and retention periods

Here is, activity by activity, what we collect, why, on what basis, and how long we keep it.

Account and sign-in

Data · Email address, username, encrypted password, language, sign-up date and last sign-in.
Legal basis · Performance of the contract: without this data, no account is possible.
Retention · Until the account is deleted. An account whose address is never verified is deleted after 14 days.

Audience measurement

Data · A pseudonymous fingerprint, the type of interaction, the listing viewed, the timestamp, the device type and the language. No IP address, no advertising identifier.
Legal basis · Legitimate interest: understanding how the service is used. The measurement is designed to remain exempt from consent.
Retention · 6 months. The fingerprint stops being linkable to anyone after 62 days, when the key used to recompute it is destroyed.

Contributions

Data · Reviews, ratings, listing suggestions, photos and reports.
Legal basis · Performance of the contract.
Retention · Until the account is deleted.

Messages (contact and bug reports)

Data · Name, email address, message content and, for a bug report, the app version, the platform and the language.
Legal basis · Legitimate interest: answering your request.
Retention · As long as needed to handle the request, and at most 12 months after it is closed.

Subscriptions

Data · Plan subscribed to, start and end dates, status, originating store and transaction identifiers. FoodSpotter keeps no amount, no invoice and no payment method.
Legal basis · Performance of the contract.
Retention · Until the account is deleted. Invoices are issued and kept by our payment providers, under their own retention periods.

Acceptance of the terms

Data · The date and version of the terms you accepted.
Legal basis · The obligation to be able to prove your consent.
Retention · Until the account is deleted.

Audience measurement

We measure site traffic with Umami, which we host on our own servers in France: no audience data leaves our infrastructure. This tool sets no cookies and builds no individual profile; the data is aggregated and cannot identify you. No prior consent is therefore required, and no banner is imposed on you.

Cookies

The site only uses cookies that are strictly necessary for it to work: “auth-token”, which keeps your session when you are signed in (7 days); “NEXT_LOCALE”, which remembers the site language for the duration of your visit; “fs_theme”, which remembers for one year the display theme applied (light or dark), so that pages open directly in that theme. Your browser's local storage (localStorage) also keeps your display preferences, a temporary copy of the places you viewed and, when you are signed in, your account details, to speed up display; this data stays on your device. No advertising or third-party tracking cookie is set.

Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw your consent at any time and to give instructions on what happens to your data after your death.

• From the app or the site, your profile lets you change your details and permanently delete your account.
• In writing, to privacy@foodspotter.app. We reply within one month.

If you consider that your rights are not being respected, you may lodge a complaint with the CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr.

Security

Traffic is encrypted, passwords are stored as an irreversible hash, and access to data is restricted to those who need it. As no system is infallible, we undertake to notify you of any breach likely to result in a high risk to your rights, in accordance with Article 34 of the GDPR.

Minors

FoodSpotter is not intended for people under fifteen. No data is knowingly collected about them; should such collection come to our attention, the data would be deleted.

Automated decision-making

No decision producing legal effects concerning you is taken by automated means.