Privacy policy
Last updated: October 15, 2026. The community and private message sections are a draft, to be reviewed by a lawyer before going live.
In short
- The site works without an account. Your trip stays in your browser.
- An account (Google sign-in) is only used to publish trips, stories and photos, to like, comment, and to send private messages (adults only).
- We keep the minimum: your Google identifier and the nickname you choose. Never your email address or your Google photo.
- Your private messages are encrypted: no one reads them, not even moderators, unless a message is reported (each read is logged).
- No advertising or tracking cookies. A single cookie, the session cookie, when you are signed in.
- You can delete your account and everything attached to it in one click, under “My account”.
Privacy officer
Thomas Crespo, [email protected]. For any question or request to access, correct or delete your information, write to them.
What we keep, why and for how long
| Data | Why | How long |
|---|---|---|
| Google identifier (a number, not your email address) | To recognize you when you sign in | Until the account is deleted |
| Display name (your first name at first, editable) | To show it with your published trips | Until the account is deleted |
| Session (fingerprint of a random token, in a cookie) | To keep you signed in | 30 days, or until you sign out |
| Published trips (and their notes, if you choose to publish them) | To show them under Community › “Published trips” | Until they are removed or the account is deleted |
| Nickname, age range (adult, or 14 to 17), date you accepted the rules | Identify you publicly without your name; keep private messages for adults | Until the account is deleted |
| Chosen avatar and profile photo, if you add one (resized, GPS location and other metadata removed) | Show it with your posts and messages | Until it is removed or the account is deleted |
| Stories, photos (metadata and GPS removed) and comments you publish | Show them in the Community and on places and routes | Until they are removed or the account is deleted |
| Private messages, one-to-one or in groups (encrypted text, with the date, the participants and the group name) | Let you exchange with another adult member | Until their author's account is deleted (one-to-one: either one's; in a group: or the group's deletion) |
| Moderation decisions and audit log (who did what, when, why; never the text of messages) | Safety, handling reports, evidence if proceedings arise | Duration to be set with a lawyer |
| Your likes and reports | Counters, ranking, moderation | Until the account is deleted |
| Error reports about a place (no account): the place, the reason, your comment, the page, the date, and a one-way fingerprint of the day, the IP address and the browser | To correct Fallest's data; the fingerprint limits the number of reports per day | 12 months |
| Missing places suggested (no account): the name, address, type, website and your details, the page, the date, and the same daily fingerprint | To complete Fallest after checking; the fingerprint limits the number of submissions per day | 12 months |
| Views of published trips: one-way fingerprint of the day, the IP address and the browser | To count one view per visitor per day, without a cookie | 2 days |
Group trips
If you choose "Share with others", the list of activities in your trip (without your notes), its name, days and start date are stored on our servers under a secret link, with no account. Anyone with that link can read and edit the trip. We keep no name or email for this: only a one-way fingerprint of your address, deleted after 24 hours, to limit abuse. The group trip is deleted 90 days after its last change, or immediately if you click "Stop sharing".
In your browser only
Your trip (stops, notes, dates), your light or dark theme choice and your language are kept in your browser's local storage. They are not sent to us, unless you publish your trip or copy a sharing link.
External services
- Google: sign-in, if you choose it.
- Cloudflare: hosting of the site and of the database. Servers may be located outside Quebec.
- OSRM (public routing server): receives the coordinates of your trip's stops to calculate the route.
- Photon (komoot, Germany; OpenStreetMap data): receives the text typed in a start or destination field when it looks like an address (a number, or no town found), to suggest precise addresses.
- Open-Meteo: receives the coordinates of the place you are viewing for the weather.
- OpenFreeMap: provides the base map.
No data is sold or used for advertising.
Your rights
At any time you can: view your published trips and change your display name (“My account”); remove a published trip; delete your account, which permanently erases your identifier, your name, your published trips, your likes and your reports. For any other request, write to the officer above.