Privacy policy

Who is responsible

The data controller is Uplif Dev (Entreprise Individuelle - Mathieu REA), Villefontaine (38090), France. Full postal address provided on justified request.. Contact for any privacy question or request: contact@uplifdev.pro.

Data we collect

We collect only what the service needs (data minimisation).

• Account: e-mail address, username, display name, preferred language, optional country, and your password stored only as a salted scrypt hash.
• Content you submit: park names and descriptions, GPS coordinates, 3D park scenes, reviews and favourites. Park locations are public once approved.
• Technical data: IP address and browser type in security logs and rate limiting, and the strictly necessary cookies described in the cookie policy.
• Nothing else: no advertising identifiers, no profiling, no sale of data. Audience statistics are off unless you accept them.

Why and on what legal basis

• Provide your account and the Builder (contract, GDPR art. 6.1.b).
• Moderate submissions, prevent abuse and secure the service (legitimate interest, art. 6.1.f).
• Comply with legal obligations such as answering authorities (art. 6.1.c).
• Measure audience in an anonymous, privacy-friendly way, only if you consent (art. 6.1.a). You can withdraw consent at any time from “Cookie settings” in the footer.

How long we keep it

• Account data: until you delete your account.
• Security logs: up to 12 months.
• When you delete your account, your identity, e-mail, password, sessions, reviews, favourites, memberships and notifications are erased. Parks and plans already published stay online without any link to you, because they are collective content.

Who receives data

• Hosting: OVHcloud, 2 rue Kellermann, 59100 Roubaix, France, in the European Union.
• Payment and billing: when you subscribe to a paid plan, payments are processed by Stripe (stripe.com), which acts as an independent data controller for payment details and as a processor for customer records under its privacy policy and standard contractual clauses where applicable. We never see or store your payment card numbers.
• Map tiles: when you open the map, your browser requests tiles directly from OpenFreeMap (openfreemap.org), which therefore receives your IP address and browser type. No cookie is set and no account data is sent.
• Our moderators and administrators, who see submitted parks and scenes.
• Optional enrichment services, only when enabled: Google Places (park name and public coordinates) and an AI service (park technical description). No account data is sent to them.
• We never sell or rent personal data.

Transfers outside the EU

By default none. If an optional enrichment service located outside the EU is enabled, it only receives public park data, under the European Commission standard contractual clauses where applicable.

Your rights

You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent.

• Access and portability: Account page › “Export my data” downloads a JSON file with everything linked to your account.
• Erasure: Account page › “Delete my account”, confirmed with your password.
• Any other request: write to contact@uplifdev.pro; we answer within one month.
• Complaint: you may contact your data protection authority; in France, the CNIL (cnil.fr).

Security

HTTPS and HSTS everywhere, salted password hashing, httpOnly session cookies, rate limiting on sign-in and exports, server-side access control, input validation and regular dependency audits. No system is perfect: if a breach affects you, we notify you and the authority as required by law.

Children

The service is not directed at children under 15. If you are under 15, ask a parent or guardian before creating an account; we delete accounts we learn were created without such consent.

Changes

We update this policy when the service changes; the date at the top shows the latest version. Substantial changes are announced in the service.