Privacy policy

Version of 15 September 2026.

This is a translation, provided so that you can read this policy. Haltoo is published from France and this policy is governed by French law. Where the two versions differ, the French version is the one that applies.

Haltoo collects the minimum it needs to work: an email address if you create an account, and whatever you choose to publish on the map. No advertising, no trackers, nothing sold on.

1. Who is responsible for this data

The data controller is David NOEL, whose details appear in the legal notice.

For any question about your data: contact@haltoo.com.

2. What is collected, and why

If you only browse the map

No account is needed, and no identifying data is collected. The app queries our servers to show the places visible on screen, and third-party servers for the map background: those requests carry your IP address, as any connection to a website does (see §5).

If you create an account

Data	Why	Legal basis
Email address	To identify your account and let you sign back in. Either provided by Google sign-in, or entered by you and verified with a six-digit code.	Performance of the service
Pseudonym	To sign your contributions publicly. It is generated automatically when you sign up (something like `cycliste-1042`) and you can change it. Your real name is never asked for.	Performance of the service
Account creation date	Running the service and countering abuse.	Legitimate interest

Your email address is never published, never shown on your contributions, and never visible to other users.

If you contribute

Data	Status
Places — coordinates, type, features, description	Public, signed with your pseudonym. Published under the ODbL licence (see the terms of use and the Data page).
Reviews and ratings	Public, signed with your pseudonym. May feed, without identifying you, into statistics about places, and be quoted there in short excerpts without your pseudonym (see below).
Photos	Public. EXIF metadata is stripped before upload: neither where the photo was taken, nor when, nor which device took it leaves your phone. Like reviews, may feed into statistics about places.
Favourites	Private. Visible to you alone, never shown to anyone else.
Reports	Not public. Passed to moderation, and kept as evidence of how long they took to handle.

Statistics about places. Your reviews, ratings and photos may be used to produce aggregate statistics about places and routes, and to estimate how reliable the information shown is. These statistics may be published or passed on to third parties, for example local authorities or tourist offices (terms of use, §5). They are anonymous: they are about places, never about people, and identify no contributor. Short excerpts from your reviews may be quoted in them, presented as “a cyclist's review” with their month of publication, without your pseudonym and stripped of anything that could identify a person; your photos, never. The processing that produces them rests on the publisher's legitimate interest in improving the service and sharing what it teaches with the people who look after the areas cyclists travel through. You can object by taking the content concerned down, or by writing to us.

Your location

Location is used on the device; it is not tracked. The app uses it to centre the map on you, and to offer your current position as the location of a place you are creating.

It is sent to our servers in one case only: when you confirm the creation of a place — and then it is the coordinates of that place, not your journey. There is no background tracking: the permission requested is limited to while the app is open, and the app keeps no movement history.

It leaves the device in a second case, and to a third party: when you open a place's card, the app asks a routing engine for the real cycling distance to it, the time and the climb. Computing a route means saying where you are starting from: your position and the place's are therefore sent to it, yours rounded to about ten metres, with no account, no key and nothing that identifies you (see §5). Nothing is sent if you open no card, or if you have not granted location.

Location permission can be refused, and withdrawn at any time, in your phone's settings. The app remains usable without it.

3. What is not collected

No advertising, and no advertising identifier.
No analytics, no behavioural tracker, no tracking cookie.
None of your personal data sold or shared for commercial purposes, under any circumstances. The statistics and review excerpts described in §2 are designed to reveal nothing about you: they are about places, with no pseudonym and nothing identifying.
No movement history.
No access to your contacts, your calendar, or your other apps.
Access to your photos, when you grant it, serves only the photo you choose to send. Nothing else is read.

4. For how long

Your account — until you delete it.
Your contributions — with no time limit, because they describe places and not people. See below what becomes of their link to you.
Reports — three years after they are handled, the date of receipt being what evidences the response time.
Technical logs at our host — a few days, according to its own policy.

What deleting your account covers

Deletion is done from within the app, in your profile, without having to write to anyone. It is immediate and permanent.

It erases your account, your email address and your pseudonym.

It does not erase the places, reviews and photos you have published: it detaches them from you. They stay on the map, with no remaining link to your account or your pseudonym — they become anonymous. The reason is that the map would otherwise empty out every time a contributor left, and the fountain you reported is still useful to someone the following summer. If you would rather a specific piece of content disappeared than be anonymised, ask us before deleting your account: afterwards, nothing is left to show that it was yours.

5. Who the data is passed to

Haltoo relies on a handful of third-party services, and on no others. None is a commercial partner; none receives data for advertising purposes.

Service	Role	What it receives
Supabase	Hosting for the database, authentication and photos	All of the data above. Servers located in Ireland (region `eu-west-1`), within the European Union.
OpenFreeMap	Map background	Your IP address and the map areas displayed. No account, no key, no identifier relating to you.
The IGN's Géoplateforme	Place search	The text you type into the search box, and your IP address.
BRouter	Cycling distance, time and climb to a place	Your position, rounded to about ten metres, the position of the place you are viewing, and your IP address. No account, no key, no identifier relating to you.
Google	One-tap sign-in, if you choose it	The fact that you are signing in to Haltoo. Google passes us back your email address, and nothing else.

Features still to come may rely on other services — weather, for example. This page will be updated before they go live.

6. Your rights

You have, over your data, a right of access, rectification, erasure, restriction, objection and portability. In practice:

Access and rectification — your pseudonym and your contributions can be changed directly in the app.
Erasure — account deletion is in your profile (§4).
The other rights, and any request the app cannot satisfy, are exercised by writing to contact@haltoo.com. Answer within one month.

If our answer does not satisfy you, you may lodge a complaint with the French data protection authority, the Commission nationale de l'informatique et des libertés (CNIL). If you live in another EU country, you may also lodge it with your own national supervisory authority.

7. Minimum age

Browsing is open to everyone. Creating an account is restricted to people aged 15 and over, the age of digital consent in France. Below that age, the agreement of a holder of parental authority is required.

8. Security

Exchanges with our servers are encrypted. Access to the data is restricted at the level of the database itself: each account can only modify what belongs to it, and that rule is enforced by the server, not by the app — which makes it independent of the version installed on your phone.

9. Changes

This policy may change, particularly as the app gains features. The version date appears at the top of the page; any substantial change will be signalled in the app.