Privacy policy

1. Data controller

The data controller is Audric Lima, sole trader (entrepreneur individuel) trading under the name ClickEasy, 40 chemin de Lizieu, Pugieu, 01300 Chazey-Bons, France (SIREN 928 935 782). For any question about your data: contact@flagnow.fr. No data protection officer has been appointed, as this is not mandatory for our activity.

We do not sell your data and do not use it for advertising profiling.

2. Data processed, purposes and legal bases

If you refuse location access, your photos are simply posted without a position on the map. If you refuse notifications, the app works normally, without alerts. The photos you post may show other people: the terms of use require you to obtain their consent.

3. Who sees what

An event's content (nicknames, photos, photo positions on the map, messages, votes, points) is visible only to the members of that event, and to people to whom the organiser sends a keepsake link (read-only) or a friends link (likes and comments, without the chat). It is not public and these links can be deactivated at any time. On the website, the invitation page (flagnow.fr/j/CODE) shows only general information: event name, name of the star of the day, type, dates, status and number of participants, to anyone who has the link or the code. Your email address is never shown to other users.

4. Retention periods

• Photos: kept for as long as the event exists, so that its members can look back at them; deleted if no member has logged in for 3 years, or sooner on request.
• Chat messages: deleted automatically 15 days after the end of the event.
• Album orders (delivery address, email, album PDF): 10 years for accounting records; the PDF of an ordered album is kept in case a reprint is needed.
• Account (nickname, email, participation, votes, points): kept until the account is deleted.
• Inactive guest accounts (without email): deleted after 12 months without logging in.
• Technical logs: 12 months at most.
• Billing data (once purchases exist): 10 years, under accounting obligations (article L123-22 of the Code de commerce, the French Commercial Code).

When you delete your account, the data is erased without delay, except for backup copies, which are automatically overwritten within a short period.

5. Providers (processors) and transfers outside the European Union

We use the following providers, who process data on our behalf and according to our instructions:

Where the US provider is also certified under the EU-U.S. Data Privacy Framework, that framework applies in addition. You can obtain a copy of the safeguards by writing to us.

6. Upcoming processing

The following features are not yet active. This policy will be updated before they are launched, and you will be informed:

• None for now: this policy will be updated before the launch of any new feature that uses your data.

7. Your rights

You have the following rights over your data:

• access: find out what data we hold and obtain a copy;
• rectification: correct inaccurate data;
• erasure: have your data deleted;
• portability: receive your data in a machine-readable format;
• objection to processing based on legitimate interest;
• restriction of processing;
• withdrawal of consent at any time (location, notifications), in your phone's settings, without affecting what was done before;
• post-mortem instructions: specify what should happen to your data after your death.

How to exercise them

• In the app, Profile › My account: “Download my data” (a file with your profile, your events, your messages, your votes and links to your photos, valid for 7 days) and “Delete my account” (see the Delete my account page).
• By email to contact@flagnow.fr, preferably from the address linked to your account. If we have serious doubts about your identity, we may ask you for additional information.

We reply within one month of receiving the request (extendable by two months for a complex request, in which case we will let you know).

If you believe your rights are not being respected, you can lodge a complaint with the CNIL (the French data protection authority): www.cnil.fr, or 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.

8. Website and cookies

The flagnow.fr website does not set any cookies or trackers: no audience measurement, no social media buttons. Only the technical storage strictly necessary for the pages to work is used (for example, to play in the browser without an account, your game session is kept in that browser).

One exception: the browser game page (flagnow.fr/jeu/…), for guests who play without the app, during a free event. As in the app, Google AdSense ads are shown there (never during a challenge, a vote or a photo). Before any ad, a Google banner asks for your choice: with your consent, Google may use cookies and identifiers to personalise ads; without consent, only non-personalised ads are shown, with the cookies strictly necessary for fraud prevention and frequency capping. You can change your mind at any time through the “Manage my choices” link on the page. No ads are shown when the organiser has bought a pack or has a subscription.

When you visit the website, your browser communicates with:

• Netlify, which hosts the pages and records the IP address in its technical logs;
• Supabase, on the invitation page (event preview) and in the “My events” area, the keepsake link and the friends link (photos, map, recap);
• OpenFreeMap, to display the base map on these pages (IP address visible to this service, no cookies);
• Stripe, only if you order an album, on the payment page;
• Google (AdSense and its consent banner), only on the browser game page, during a free event.

These exchanges are based on our legitimate interest in displaying the website correctly.

9. Security

Communications between the app, the website and our servers are encrypted (HTTPS). Passwords are never stored in plain text: they are kept in hashed form (irreversible encryption) by Supabase's authentication service. Access to each event's data is restricted to its members by security rules applied directly in the database.

10. Minors

Flagnow is reserved for people aged 18 and over. We do not knowingly collect data about minors. If you think a minor is using the app, write to us: the account and the content concerned will be deleted.

11. Changes to this policy

This policy may be amended, in particular when purchases or advertising are introduced. The date of the last update is shown at the top of the page; in the event of a significant change, you will be informed in the app.