Privacy policy
EcoRando records time-stamped positions linked to an account. That is the service’s most sensitive data, more so than an email address: it says where someone was, and when. This page sets out exactly what is done with it.
In force since Version française
This English text is provided for convenience. The French version of this document is the only legally binding one, and prevails in the event of any discrepancy.
Data controller
Jérôme Buisine — sole trader, 129 Impasse des Embrunes, 74230 Dingy-Saint-Clair, France. Contact: contact@subalpine.it.
Data recorded
Account: email address, display name, language, role, creation and last sign-in dates.
Field data: for each report and each action, the position of the litter, the position measured by your device at the time, its stated accuracy, any altitude, the time of the action, and the descriptions you enter.
Sign-in: one-time codes are stored hashed, with the IP address of the request, to limit abusive sending.
Account: kept for as long as you sign in. After twenty-four months without signing in, an email warns you; unless we hear from you, the account is deleted thirty days later. Signing in again cancels the notice. Your reports and clean-ups stay on the map, detached from your name.
Traffic: measured with Umami, installed on the publisher’s own infrastructure — not a third-party service. Without cookies and without keeping your IP address: the database schema has no column in which to store it. Recorded are the pages viewed, the timestamp, the browser, the operating system, the device type, the language and an approximate location (country, region, city). The pages of a single visit are linked together, but the fingerprint linking them changes every night: from one day to the next, nothing matches up any more. Retention: twenty-five months.
Server logs: independently of the measurement above, the web server records every request — IP address, date, address requested, response code, browser. They serve security and fault diagnosis, not tracking you. Together with the sign-in codes, these are the only two places your IP address is written; Umami writes it nowhere.
Legal bases and purposes
Performance of the service (GDPR art. 6-1-b): account, submission and display of reports.
Legitimate interest (GDPR art. 6-1-f): prevention of abuse and points fraud, aggregated traffic measurement, service security.
Positions: what is published, what is not
Positions published on the map and through the API are only accurate to within 25 metres. The fine position is used only for internal calculations — checking an action is made on site, attaching a pickup to the right report.
The position measured by your device is never published, in any form. It appears neither on the map, nor in a report’s history, nor on a profile.
No public profile shows a map, a route, or the date of an action: cross-referenced, these would reconstruct your movements.
Retention
Sign-in codes: 24 hours, then deleted. They carry an email address and an IP address; keeping them would amount to a permanent connection log.
Web server logs: 14 days, then erased automatically by rotation.
Fine positions of observations: 18 months, then permanently reduced to 25-metre accuracy. A 2024 report no longer needs locating to the metre.
Account: until you delete it.
Reports and pickups: kept without time limit, anonymised when the account is deleted.
Deleting your account
Deletion removes your email address, display name and points history. Your reports and pickups stay on the map, unlinked from you.
This is deliberate: deleting them would reopen places that were genuinely cleaned, send other hikers looking for a pile that no longer exists, and distort public statistics. Anonymisation removes the link to the person, which is what the right to erasure protects.
Recipients
No data is sold, rented or passed on for advertising. No third-party trackers, no social networks, no ad networks.
The base map is served by the publisher’s own infrastructure: your browser contacts no external map provider.
The only processors are the host (OVH SAS, France) and the email service used for sign-in codes.
Your rights
Access, rectification, erasure, restriction, objection and portability: write to contact@subalpine.it. You will receive a reply within one month.
You may lodge a complaint with the CNIL (www.cnil.fr).