Privacy policy

Arpentix is published by Benjamin Drouilly, a natural person, residing in Lèves (28300), France. He is the controller of your data within the meaning of the GDPR.

Contact: contact@arpentix.app

Arpentix can be used without an account. Creating an account is optional: it serves only to back up your logbook of discoveries and to find it again on another device.

If you create an account, you do so through Apple or Google. We then keep your e-mail address and the identifier provided by that service. We never know your password.

You can delete your account at any time from the app (Settings → Account). Deletion erases your data from the server.

Your location

It is used to show the places near you and, if you enable them, to trigger proximity notifications. It is used on your device, at the moment you use it. No history of your movements is sent to our servers.

Your visits (the logbook)

When you mark a place as visited, the app records the place, the date and the town. This information stays on your device, and is synchronised to our servers if you have an account, so that you do not lose it.

Your photos

If you allow it, the app reads the date and the coordinates recorded in your photos in order to attach them automatically to the places you have visited. This reading takes place entirely on your device. Your photos are never sent or copied: only a local reference is kept.

Usage statistics

In the application: measurement is disabled by default and stays that way until you enable it in Settings › Application › Anonymous statistics. While it is off, nothing is sent — not even a diagnostic.

If you enable it, the following is sent to TelemetryDeck: the screens opened and the features used, the category of the places viewed (church, castle, museum…), the outcome of the location permission request — granted or denied —, the settings you change, and what the app fails at: a search with no result, an empty entry, a page closed straight away. Numbers — results found, distance of a route — are placed in bands, never sent as they are.

Never sent: your coordinates, even rounded, the name of a town or municipality, the identifier of a place, the text you type in the search field, the time of your actions, nor any stable identifier. Each launch of the app draws a random session number, which is neither kept nor attached to an account.

On the website: we use Vercel Web Analytics to count page views. No cookie is placed — you can check for yourself, the site places none, of any kind.

To tell two visitors apart from a single visitor viewing two pages, Vercel computes a fingerprint from your request. That fingerprint is erased after 24 hours. In concrete terms: several pages viewed on the same day may be linked to one another, but your visit today cannot be connected to your visit next week.

The following are recorded: the page viewed, the page you come from, the country and the city, the browser, the operating system and the device type. On a shared logbook, the link token is removed before sending: we count the page, never the logbook viewed.

Only one thing is added, and only if you arrived through a printed QR code: the code of the card that showed it to you — that of a tourist office, a town hall, a guest house. It designates the display stand, not you: everyone who scans the same card sends the same value. It is written nowhere on your device and disappears when you close the tab.

This measurement rests on our legitimate interest in knowing whether the site is used, and not on your consent — that is what explains the absence of a banner. The counterpart is that you can object to it at any time, right here:

Requests to the sources

To display the places, the app queries public services (Wikipedia, OpenStreetMap). These requests contain the coordinates of the area being viewed and are subject to the policies of those services.

When you ask for walking directions, the starting point and the destination are sent to OpenRouteService (HeiGIT, University of Heidelberg, Germany) to compute the route. No other data is transmitted to it.

Your logbook is private by default. You may choose to make it accessible through a link. This feature is entirely optional.

If you enable it, the public page shows: the places you have visited, their category, their town, and the month of the visit.

It never shows: your photos, the exact dates or times of your visits, your location, your e-mail address, or your surname. The coordinates shown on the map are rounded to about one kilometre, and the map cannot be zoomed beyond a neighbourhood level. These limits are applied on the server: the masked data is not merely hidden on screen, it is not sent.

The link is hard to guess, but it is not password-protected: anyone who has it can see the page. Share it in full awareness of that. The page asks search engines not to index it.

You can revoke sharing at any time. The link then stops working immediately. We can, however, do nothing about what may already have been copied or saved by someone who had access to it.

You should know: when a link is pasted into a messaging app or a social network, that service builds a preview of it — your first name and your statistics — and keeps it on its own servers. Revocation closes the page, it does not erase those previews already created elsewhere. That is the very nature of sharing by link.

• your contacts
• your browsing history
• your photos or their content
• a history of your movements
• no data for advertising purposes

Arpentix does not sell, rent or share any personal data. There is no advertising and no third-party tracker.

• Account and logbook — Supabase, on servers located in Zurich, Switzerland. Switzerland benefits from an adequacy decision by the European Commission: your data is protected there at a level recognised as equivalent to that of the European Union.
• Website — Vercel Inc.
• App statistics — TelemetryDeck, servers located in the European Union. Only if you have enabled them.
• Route calculation — OpenRouteService (HeiGIT, University of Heidelberg, Germany). We transmit to it only the points of the route to be computed, with no account and no identifier; what it keeps of them is a matter for its own policy.

• Account and logbook: as long as your account exists. Deleting the account erases them.
• Data on your device: until you delete it or uninstall the app. The article cache is erased automatically after seven days.
• Sharing link: until it is revoked.
• Statistics: aggregated, they relate to no one and cannot be linked back to you.

You have a right of access, rectification, erasure, portability and objection regarding your data.

The right to object to the website's audience measurement is exercised directly, without writing to us: the box is higher up on this page, in the “Usage statistics” paragraph.

In practice, the app already allows you to export your data in JSON format and to delete your account (Settings → Account). For any other request, write to contact@arpentix.app.

You may also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).

Arpentix is intended for people aged 15 or over, the age of digital consent in France. If you are under 15, your parents' agreement is required.

This text may change along with the application. The date below indicates its latest revision.