Privacy policy
EcoRando records time-stamped positions linked to an account. That is the service’s most sensitive data, more so than an email address: it says where someone was, and when. This page sets out exactly what is done with it.
Data controller
Jérôme Buisine — sole trader, 129 Impasse des Embrunes, 74230 Dingy-Saint-Clair, France. Contact: contact@subalpine.it.
Data recorded
Account: email address, display name, language, role, creation and last sign-in dates.
Field data: for each report and each action, the position of the litter, the position measured by your device at the time, its stated accuracy, any altitude, the time of the action, and the descriptions you enter.
Sign-in: one-time codes are stored hashed, with the IP address of the request, to limit abusive sending.
Traffic: a counter per day and per page, with no cookie, no identifier and no way to reconstruct a journey.
Legal bases and purposes
Performance of the service (GDPR art. 6-1-b): account, submission and display of reports.
Legitimate interest (GDPR art. 6-1-f): prevention of abuse and points fraud, aggregated traffic measurement, service security.
Positions: what is published, what is not
Positions published on the map and through the API are only accurate to within 25 metres. The fine position is used only for internal calculations — checking an action is made on site, attaching a pickup to the right report.
The position measured by your device is never published, in any form. It appears neither on the map, nor in a report’s history, nor on a profile.
No public profile shows a map, a route, or the date of an action: cross-referenced, these would reconstruct your movements.
Retention
Sign-in codes: 24 hours, then deleted. They carry an email address and an IP address; keeping them would amount to a permanent connection log.
Fine positions of observations: 18 months, then permanently reduced to 25-metre accuracy. A 2024 report no longer needs locating to the metre.
Account: until you delete it.
Reports and pickups: kept without time limit, anonymised when the account is deleted.
Deleting your account
Deletion removes your email address, display name and points history. Your reports and pickups stay on the map, unlinked from you.
This is deliberate: deleting them would reopen places that were genuinely cleaned, send other hikers looking for a pile that no longer exists, and distort public statistics. Anonymisation removes the link to the person, which is what the right to erasure protects.
Recipients
No data is sold, rented or passed on for advertising. No third-party trackers, no social networks, no ad networks.
The base map is served by the publisher’s own infrastructure: your browser contacts no external map provider.
The only processors are the host (OVH SAS, France) and the email service used for sign-in codes.
Your rights
Access, rectification, erasure, restriction, objection and portability: write to contact@subalpine.it. You will receive a reply within one month.
You may lodge a complaint with the CNIL (www.cnil.fr).
Cookies
The site sets no analytics or advertising cookies. Browser local storage is used to keep your session, your display preferences, and actions waiting to be sent while you are offline. That data stays on your device.