Privacy policy | Travel in Auvergne

How Travel in Auvergne handles your data.

In short

Audience measurement with Google Analytics 4, which does not log IP addresses, with advertising signals turned off (no ad personalisation, no Google Signals).
Heatmaps and session recordings with Microsoft Clarity, to understand how the site is used (areas clicked, scrolling). Clarity automatically masks the text you type.
Campaign measurement with the Meta Pixel (Facebook / Instagram): page views only, to measure how well our posts and campaigns perform on the networks where our community is.
Geolocation: only if you click “Spots autour de moi” (spots around me); the data stays on your device.
Personalised recommendations: your interests (places viewed, clicked, added to favourites) are calculated and stored only on your device. Our servers only receive anonymous, aggregated display counters.
Search: what you type in our search bars (site and app) is kept for 12 months to improve the site, with no link to your account or to your IP address.
No data sold, no advertising profiling.
You can block GA with a script blocker (uBlock Origin, Brave) or the official Google Analytics Opt-out extension.

Data we collect

Across the whole site (Google Analytics 4)

We use Google Analytics 4 to measure traffic to the site. The data collected is:

The URLs of the pages viewed
The URL you came from (referrer)
The country you connect from, worked out from your IP address: Google Analytics 4 does not log or store the IP address
Your browser, operating system and screen size
A persistent client identifier (_ga and _ga_* cookies), with a lifetime of 2 years, extended on each visit

GDPR-friendly configuration: we have turned off allow_google_signals (no cross-device tracking through Google accounts) and allow_ad_personalization_signals (no sharing of data with Google Ads). With GA4, IP addresses are neither logged nor stored. The data is kept for 14 months, then deleted automatically.

Processor: Google Ireland Limited (Ireland). Possible transfer outside the EU to Google LLC (United States), governed by the Standard Contractual Clauses and the EU-US Data Privacy Framework.

Across the whole site (Microsoft Clarity)

We use Microsoft Clarity to see, in aggregated form, how visitors move around the site: heatmaps (areas clicked, scroll depth) and anonymised session recordings. Clarity masks by default the content you type (form fields, sensitive text) before anything is sent. The data collected is your interactions with the page (clicks, movements, scrolling), your type of device and browser, and an anonymous identifier stored in cookies (_clck, _clsk).

Processor: Microsoft Ireland Operations Limited (Ireland). Possible transfer outside the EU to Microsoft Corporation (United States), governed by the Standard Contractual Clauses and the EU-US Data Privacy Framework. You can block Clarity with a script blocker (uBlock Origin, Brave), just like GA4.

Across the whole site (Meta Pixel)

We use the Meta Pixel (Facebook / Instagram) to measure how well our posts and campaigns perform on social networks, where most of our community is. The pixel records page views (PageView event), your type of device and browser, and an identifier stored in Meta cookies (_fbp, and _fbc if you arrive from an ad). It may be used to build audiences for our campaigns and to measure their conversions.

Processor: Meta Platforms Ireland Limited (Ireland). Possible transfer outside the EU to Meta Platforms, Inc. (United States), governed by the Standard Contractual Clauses and the EU-US Data Privacy Framework. You can block the pixel with a script blocker (uBlock Origin, Brave), just like GA4, and adjust ad tracking in the ad settings of your Meta account.

If you share your location on the map

When you click “Spots autour de moi” (spots around me), your browser asks for your permission to share your location. This data is:

Stored only on your device (localStorage), for 24 hours maximum.
Never sent to our servers.
Erasable at any time by clearing your browser cache.

Personalised recommendations (on your device)

To vary the places shown and suggest places that suit your tastes, the site stores locally (localStorage) the places you have already viewed, clicked or added to favourites, along with the affinities by category and by department that follow from them. This data:

Stays on your device and is never passed as such to our servers or to third parties.
Only feeds aggregated, anonymous counters on the server side (number of displays and clicks per place and per day, with no identifier or IP address).
Is erased automatically over time (gradual forgetting) or immediately when you clear your browser's site data.

When you use search

To know what you are looking for, and above all what the site cannot find yet, we keep every search made in a search bar on the site or in the app:

the text typed, the bar used (home page, header, Search page, map, app), the number of results shown and, if you open one, the result chosen;
a randomly drawn session identifier, specific to the browser tab or to the app launch, used to count people rather than keystrokes. It is never linked to your account, and your IP address is never recorded with your searches (only a hashed fingerprint of the address, never the address in plain text, is used to limit abuse);
when you type a sentence (“what to do with children when it rains”), it is sent to our service provider Anthropic, on its own and with no identifier at all, to be converted into search criteria (town, category, “with the family”…). This conversion is kept for 30 days to answer the same sentence faster, then erased;
this data is kept for 12 months, then erased.

A search bar is not meant for personal information: avoid typing a name, an address or a number into it.

If you write to us

The contact form opens your email client. Your email address reaches us that way and is kept for as long as needed to handle your request (typically 12 months), then deleted.

If you create an account

Creating an account (optional) records your email address, your username and the preferences you fill in (departments, interests), as well as the content you publish or save (favourites, spots you submit, reviews). This data is used only to run your account and to personalise your recommendations. Legal basis: performance of the service (your sign-up). You can delete your account and all of this data at any time from your settings or by writing to us.

If you subscribe to the newsletter

By subscribing, you give us your email address so you can receive our selection. Legal basis: your consent. Every email contains a one-click unsubscribe link, and all our mailings carry the standard List-Unsubscribe header handled by email services. You can unsubscribe at any time, without giving a reason.

If you are a professional we contact

As part of our activity, we may contact tourism professionals (accommodation, restaurants, activities) at their public business email address. Legal basis: legitimate interest in presenting our media outlet to potential partners (B2B prospecting, article L34-5 of the French Postal and Electronic Communications Code). The source of the data (the establishment's public page) is stated in the first message, which includes a one-click unsubscribe link. A request to object is honoured immediately and permanently.

Cookies

The site uses the following cookies:

Google Analytics 4 cookies (_ga, _ga_*): anonymous client identifier used to measure the audience. Lifetime: 2 years, extended on each visit. You can delete them at any time in your browser settings, or block GA with the official Google extension or a script blocker (uBlock Origin, Brave).
Microsoft Clarity cookies (_clck, _clsk): anonymous identifier linking the pages of the same session for heatmaps and recordings. Maximum lifetime: 1 year. You can delete them in your browser settings or with a script blocker.
Meta Pixel cookies (_fbp, and _fbc when you come from an ad): identifier used to measure our Facebook / Instagram campaigns and to build audiences. Maximum lifetime: 3 months. You can delete them in your browser settings or with a script blocker.
Functional cookies: the map filters are stored in the URL, not in cookies.
Admin session cookies: if you log in as an admin (restricted area), a session cookie is set to keep you logged in.

Links to third-party sites

The site contains links to third-party sites (booking, ticketing, official websites of establishments). When you follow these links, you leave Travel in Auvergne, and the processing of your data then depends on the policy of the third-party site concerned. No personal information passes through us.

Your rights

Under the GDPR, you have the following rights:

Right of access to your data
Right to rectification
Right to erasure
Right to data portability
Right to object to processing
Right to lodge a complaint with the CNIL (the French data protection authority)

To exercise any of these rights, write to us at contact@travelinauvergne.fr. We reply within 30 days at most.

Hosting and processors

The site is hosted by Vercel (United States, transfer governed by the Standard Contractual Clauses) and the database by Supabase (eu-west-1 region, Ireland). To run the service, we use the following processors, each bound by contract (SCCs for transfers outside the EU):

Vercel (hosting, United States);
Supabase (database and storage, Ireland);
Resend (sending transactional emails and the newsletter);
Google (GA4 audience measurement and map data);
Microsoft (heatmaps and session recordings via Clarity, Ireland / United States);
Meta (Facebook / Instagram campaign measurement via the Meta Pixel, Ireland / United States);
Anthropic (understanding sentences typed into search, United States: the sentence only, with no identifier);
Sentry and Upstash (technical monitoring and abuse limiting, technical data with no personal content).

Changes

This policy may change. The date of the last update is shown at the top. Major changes are announced on the home page.

Contact

For any question about your data: contact@travelinauvergne.fr.