Legal information
Privacy policy
What the service records, what it does not, and how to exercise your rights.
Last updated: ۱۲ اسد ۱۴۰۵
Reading published information requires no account, no name and no phone number.
What happens when you read the site
No account is asked for and no profile is built. The servers hosting the service keep technical logs — IP address, page requested, date and time — needed to run it and to spot abuse. Those logs are not used to learn who reads what, and they are not matched against any other information.
- No cookie is set in order to read public information.
- The language you choose is carried by the page's address; the light or dark appearance stays in your browser's own storage.
- No audience measurement, no advertising tracker, no social network buttons.
- The Android and iOS apps read the same public information, also without an account.
Data controller
The data controller is the publisher of the service, whose full identity appears in the legal notice. For any question or request about your data, write to the address given here.
- Data protection contact
- Not published yet
Maps and satellite view
The map loads only if you open it. The tiles are then requested by your browser directly from OpenStreetMap, and satellite imagery from Esri if you choose that view: those providers receive your connection's IP address, as they would for any image loaded from another site. A list without a map remains available for the same activities.
Listening to a page
When you ask to hear a page, that page's published text is sent to a provider to produce the audio. Nothing about you goes with it: no identifier, no account, no reading history. The audio is kept on the server and reused for every reader of the same page, so it is not generated again on each listen.
Your answers in a guide
Guides ask optional questions to point you somewhere. Your answers stay in the session open on your device: they are not saved, not logged, not transmitted, and nothing is kept from them once you close the page.
Organisation accounts
Publishing and coordinating require an account, reserved for invited members of participating organisations. Those accounts are the only part of the service that processes personal data on an ongoing basis, and nothing they hold appears on the public pages.
- Name, email address and phone number, the last of these for the sign-in code sent by SMS.
- Devices recognised at sign-in: browser, IP address and date.
- A history of changes, verifications, approvals and publications, with their author and date.
Legal bases
Publishing information in the public interest and keeping the service secure rest on the publisher's legitimate interest (GDPR, article 6(1)(f)). Member accounts rest on the relationship between the publisher and the participating organisation, and on the legitimate interest in protecting access to the editing workspace.
How long things are kept
Nothing is kept just in case: each period below matches a specific use.
- A member's sign-in session: eight hours, extended while it is in use.
- A device recognised for the second sign-in step: fourteen days.
- The history of changes: kept for as long as the organisation uses the platform, because it is what allows a mistake to be corrected without erasing what happened.
- A member's account: until their organisation removes it, or they ask for it to be removed.
- Technical logs: for the period the hosting provider applies.
Processors and where data is stored
The providers hosting the service are listed in the legal notice, with the region where data is stored. The database, published files and sign-in messages are hosted in France. Two kinds of processing leave the European Union: translation proposals and page narration. Both work on published or draft text, never on readers' data.
Cookies
No cookie is needed to read public information, and none is set for that purpose. In the members' workspace, strictly necessary cookies keep the session open, remember the interface language and recognise an already-approved device. No advertising or audience-measurement cookie is used, which is why this site does not ask you to accept trackers.
Your rights
You can ask for access to your data, its correction, its erasure, a restriction on how it is processed, and you can object to processing. Write to the contact address above; an answer is due within one month.
Security
Published information and organisations' internal work are two separate spaces: public pages hold published content only, while drafts, accounts and members' contact details stay in the restricted areas. Reaching the editing workspace takes two steps, one of them a code sent by SMS, and every change keeps its author and its date.
Changes to this policy
This policy changes as the service does. The last-updated date is at the top of this page: it is what tells you whether the text has changed since you last read it.