Privacy policy

What we store

Your account: an email address and a display name. If you sign in with Google or Facebook, also the account identifier they give us and your profile picture URL if you have one. If you sign up with an email address, a hashed password — never the password itself.

Your profile, all of it optional and all of it blank until you fill it in: display name, a short biography, an avatar, a location, links, the villages you have a connection to, and whether you allow other members to contact you.

What you contribute: the photographs you upload and their titles, descriptions, dates and map locations; your comments; facts you propose about other people's photographs; and messages you send through the site.

Why, and on what basis

Your account exists so your contributions stay yours and so a town's administrators can moderate what is published. Your profile exists so other members can see who identified the person in a photograph. Your contributions are the archive itself.

Under the GDPR the basis is performance of a contract for your account and contributions (Art. 6(1)(b)), and your consent for the optional profile fields (Art. 6(1)(a)).

Cookies

There is no cookie banner because there is nothing here that needs consent. The site sets three kinds of cookie and none of them track you across the web.

NEXT_LOCALE remembers whether you are reading in English or French.

kosmopoli-theme remembers a light or dark choice, and is only set if you make one.

Session cookies keep you signed in. These are strictly necessary: without them you could not stay logged in.

No analytics, no advertising identifiers, no pixels, no third-party scripts. Nothing is loaded onto the page by anyone other than us.

Who else is involved

Convex stores the database: accounts, profiles, photograph metadata, comments.

Vercel hosts the site and stores the image files.

OpenFreeMap serves the map tiles, so your IP address reaches them whenever a map is displayed — the same as for any image loaded from another domain.

Google and Facebook are involved only if you choose to sign in with them.

Nobody else. Your data is not sold, rented, or shared for advertising.

Public and private

A town is public or private, and its administrators decide which. Photographs in a public town, with their titles, descriptions and comments, are visible to anyone on the internet and may be indexed by search engines. A private town's photographs are visible only to its members.

Your email address is never shown to another member. If you turn on the contact option, members can message you through the site without seeing your address.

How long, and how to get rid of it

Your account and profile are kept until they are deleted. Photographs and comments are kept until you or a town administrator deletes them.

You can delete your account yourself, at any time, from your account page. See the data deletion page for exactly what goes and what happens to your contributions.

You can edit or delete your own photographs and comments yourself, at any time.

Your rights

You have the right to access your data, correct it, have it erased, take it elsewhere, object to its processing, and restrict it. Ask at the address below.

If you think this site handles your data badly you can complain to your national data protection authority — in France, the CNIL.

Children

This site is not intended for children under 16 and we do not knowingly hold their data. Historical photographs may of course show children; that is what a family archive is.