Privacy policy
This policy explains how Le Tour de Moi collects, uses, stores and protects your personal data.
Data controller
The data controller for the personal data collected on this website is Le Tour de Moi.
- Data controller
- Mickaël Hardouin Duparc
- Email address
- mickael@letourdemoi.fr
This information is used to answer your requests and follow up on our exchanges.
Data collected
The data collected depends on the features you use and the information you choose to provide.
A. General questions
When you use the contact form, we collect:
- Name ;
- Email address ;
- Organisation or media outlet ;
- Subject ;
- Message content.
Messages are kept for as long as necessary to process your request and follow up on the relationship.
B. Community account
Creating a community account requires the information needed for its operation and security.
- Username ;
- Email address ;
- Password ;
- Full name ;
- Profile photo ;
- City and country ;
- Date of birth ;
- Biography ;
- Language ;
- Preferences ;
- Social links.
C. Community activities
When you record an activity, we process the information needed to track your progress.
- Activity type ;
- Number of steps ;
- Distance walked ;
- Distance cycled ;
- Activity date ;
- Distance travelled ;
- Personal note.
Personal notes associated with your activities remain private and are not published.
D. Community interactions
- Recorded activities ;
- Encouragements ;
- Notifications ;
- Progress.
E. Data security
- Email address validation ;
- Password resets ;
- Logins and authentication ;
- Login attempts ;
- Session identifier ;
- Security logs.
F. Consent
- Consent to external content ;
- Consent date ;
- Version of accepted policy.
Optional data is used only after your consent where consent is required.
Data visibility
You control the visibility of the information you share with the community through the available settings.
- Profile visibility ;
- Activity visibility ;
- Visibility settings ;
- Encouragement visibility ;
- Private notes ;
- Authentication data visibility ;
- Community ranking.
Purposes and legal bases
| Processing | Purpose | Legal basis |
|---|---|---|
| Contact form | Respond to received requests | Legitimate interest in responding to your request. |
| Account | Community operation | Performance of the contract or terms of use. |
| Authentication | Keep the account secure | Necessary for service security. |
| Community profile | Allow members to introduce themselves. | Service performance (consent for optional data). |
| Activities and progress | Record efforts and calculate statistics. | Performance of the service. |
| Feed and interactions | Allow encouragements and sharing. | Performance of the service. |
| Personal notes | Keep a private comment associated with an activity. | Performance of the service. |
| Security and diagnostics | Detect errors and prevent abuse. | Legal obligation and legitimate technical interest. |
| Consent management | Keep cookie preferences. | Legal obligation and legitimate technical interest. |
| Technical display, fonts and mapping | Provide the website’s visual presentation, security and maps. | Legitimate interest in ensuring the website operates and is presented correctly. |
| Third-party content | Display YouTube, TikTok, Facebook, etc. | Prior consent. |
Third-party content and services
The website uses various technical providers and third-party services to operate and offer certain features.
- OVHcloud : Website and database hosting, and transactional email management.
- Cloudflare : Technical distribution, security and protection against attacks.
- Google Fonts : Loading the Manrope font (which may transmit technical data such as your IP address).
- Leaflet : Software library used to display interactive maps.
- OpenStreetMap : Provision of certain map layers.
- Esri : Provision of satellite map views.
- YouTube, TikTok, Instagram et Facebook : External content blocked by default until you give consent.
- Spreadshop : External shop whose components are blocked until you give consent.
Cookies
The website uses cookies necessary for its operation and, where you consent, cookies linked to external services.
| Name | Purpose | Duration |
|---|---|---|
| PHPSESSID | Session, authentication and security. | Session |
| ltdm_cookie_consent | Remembering your consent choices. | 6 months |
External content remains disabled until you have given your consent.
Withdrawing consent immediately blocks future external content loads. Cookies potentially placed by third-party platforms after activation depend on their own privacy policies.
Data recipients
Your data may be accessible only to recipients necessary for the purposes described below.
- Mickaël Hardouin Duparc, as publisher and data controller ;
- OVHcloud, for hosting and email ;
- Cloudflare, for website security and distribution ;
- other community members, only for information and activities you make visible ;
- external providers accepted when content is activated.
Your personal data is neither sold nor rented for commercial purposes.
Data transfers
Some providers may process data outside the European Economic Area under the safeguards required by applicable regulations.
A. Technical services that may be contacted when loading
- Google Fonts ;
- OpenStreetMap ;
- Esri ;
- Cloudflare.
B. Optional external content loaded only after consent
- YouTube ;
- TikTok ;
- Instagram ;
- Facebook ;
- Spreadshop.
These providers may receive technical data such as your IP address, browser information, date of access and referring page. We invite you to consult their privacy policies to learn about their transfer mechanisms and safeguards.
Retention periods
- Form messages : One year after the last exchange.
- Community account : Members may delete their account at any time from their settings. Deletion immediately and permanently removes the profile, personal data, detailed activities, photos and interactions (encouragements and notifications).
- Anonymised data : To preserve the integrity of collective challenges in which the member participated, their overall kilometre contribution is kept in strictly anonymised and aggregated form. No identifier, username or link to the former account is retained.
- Inactive account : Unless manually deleted, inactive accounts are kept for a target period of two years after the member’s last action.
- Security tokens : 24 hours (email verification) or 1 hour (password reset).
- Cookie choices : 6 months.
- Session : Duration of the browsing session.
- Diagnostic logs : Up to 30 days.
Data security
Technical and organisational measures are implemented to protect your personal data.
- Use of HTTPS ;
- Access control for community pages and data ownership ;
- Validation and cleaning of incoming data ;
- Strict expiration of security tokens ;
- Limiting login attempts (rate limiting) ;
- Secure password hashing using native functions and PHP-recommended algorithms.
Your rights
You have the rights provided by the applicable data protection regulations.
- Access and rectification of your data ;
- Erasure (“right to be forgotten”) ;
- Restriction of processing ;
- Objection (where processing is based on legitimate interest) ;
- Data portability (where applicable) ;
- Withdrawal of consent at any time.
Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
Exercise your rights
You can exercise your rights of access, rectification, erasure, restriction, objection and portability by contacting us.
You can exercise your rights by writing to us at the address shown above.
You may also contact the French data protection authority (CNIL).
Automated decision-making
Le Tour de Moi does not make decisions producing legal effects for visitors based on automated processing or profiling. Distance calculations and statistics do not constitute an automated legal decision.