FR
CalmAzur

Privacy policy

This policy describes the data processed by the CalmAzur website and the rights you have.

Data controller

[TO BE COMPLETED: publisher's name and address, see the legal notice]

General principle

CalmAzur works without user accounts. There is no sign-up, no profile, no advertising, no audience measurement tool, no third-party tracker.

Data processed

Crowd reports

When you report the crowd level of a place, we record the chosen level, the place concerned, the date, and a technical fingerprint derived from your IP address.

This fingerprint is obtained by truncating the IP address — the last block in IPv4, the last segments in IPv6 — then transforming it with an irreversible hash function specific to this site. The IP address itself is never stored, and the fingerprint cannot identify you.

  • Purpose: prevent a single visitor from skewing the data by reporting the same place several times.
  • Legal basis: legitimate interest — ensuring the reliability of a collaborative service.
  • Retention: the validity period of the report, i.e. 2 to 4 hours depending on the type of place. Expired reports are then deleted. [TO BE COMPLETED: confirm the chosen purge frequency]

Cookies

Two technical cookies are set, and only two:

  • PHPSESSID — anti-abuse lock on reports, so that the same visitor cannot report the same place over and over. Cleared when you close your browser.
  • hp-lang — remembers the display language (French or English), so you are not moved back to the other language on every page. Kept for one year.

Both are strictly necessary for the operation of the site. Neither holds information identifying you, and neither is used for advertising or statistical tracking. As such, they do not require your prior consent.

Geolocation

If you use the "Near me" feature, your browser asks for permission to access your position. This position stays in your browser: it is only used to centre the map and compute the displayed distances. It is neither sent to our servers nor stored. You can refuse or revoke this permission at any time.

Address search

Address searches are sent to the OpenStreetMap Foundation's Nominatim service through our server. Your IP address is therefore not shared with this service. Only the text of your search is. Results are cached to limit the number of calls.

Administration area

Login attempts to the administrators' area are logged — technical fingerprint, entered address, date — in order to detect fraudulent access attempts. This information does not concern visitors of the site.

Recipients

The data is neither sold, nor transferred, nor shared for advertising purposes. It is accessible to the publisher and its hosting provider [TO BE COMPLETED: hosting provider], strictly for hosting purposes.

Your rights

Under the General Data Protection Regulation, you have a right of access, rectification, erasure, restriction and objection.

In practice, since the data processed by this site is anonymised at collection time, we are technically unable to link a report to a person. We therefore cannot act on an access or deletion request about a specific report, as we cannot identify you — which is also the best guarantee of your anonymity.

For any question: [TO BE COMPLETED: contact address].

You can also lodge a complaint with the French data protection authority (CNIL).

Changes

This policy may be updated. The date of the last change is shown at the bottom of this page.