Privacy policy
Last updated: August 15, 2026
This English text is a faithful translation provided for convenience. IKASpot is operated under French law, and the French version is the one drafted against it. Should the two texts differ on a point of interpretation, the French version prevails.
This document explains what data IKASpot collects, why, how long it is kept, and how to have it deleted. It is written to be understood without legal training.
In short
- We collect the bare minimum: an email address, a username, and whatever you choose to publish.
- The GPS coordinates in your photos are stripped automatically before publication.
- Your IP address is never stored in the clear: only a one-way fingerprint of it is kept.
- No data is sold. No advertising tracker as long as advertising is not switched on.
- You can delete your account and all of your data at any time, from your settings.
Data controller
Max, Marseille. Contact: noreply@ikaspot.eu.
What we collect
When you create an account
| Data | Why | Legal basis |
|---|---|---|
| Email address | Identification, password recovery | Performance of a contract |
| Password | Stored only as an encrypted hash. It is never readable, including by us. | Performance of a contract |
| Username | Your public identity on the site | Performance of a contract |
| Age confirmation | The service is restricted to people aged 18 and over. We keep the date you confirmed, not any proof document. | Legal obligation |
When you sign in with Google or Discord
We receive your email address, your public name and your avatar. No other access to your account is requested, and we cannot post anything there.
When you publish a spot
- The title, description and features you choose.
- The coordinates of the place — the ones you point at, not your own position.
- The photos and videos, with their metadata removed (see below).
Technically, on every visit
- A fingerprint of your IP address, computed with a secret key. It lets us spot abuse (spam, brute force) without being able to trace it back to you. The address itself is not kept.
- A session cookie if you are signed in. See the cookies page.
Photos: what we strip out
A photo taken with a phone commonly carries, without its author realising: the exact GPS coordinates of where it was taken, the date and time, the camera model, and sometimes the owner’s name.
Publishing that would say far more than you think you are sharing. All of this metadata is therefore removed at upload time: every image is fully re-encoded on our server, and only the cleaned image is kept. The original file is never stored.
Spot locations
A signed-out visitor never sees a spot’s exact position: the coordinates shown are offset by 80 to 200 metres. This protects fragile places and limits automated scraping of the database.
A contributor can also choose to blur their spot for everyone, signed-in members included.
What we do not do
- We do not sell or rent any data.
- We do not track your browsing on other sites.
- We do not record your position continuously. Geolocation is only used if you tap “My location”, and the result is not kept.
- We never publicly show which spots you saved as favorites or which ones you have visited.
How long we keep it
| Data | Retention |
|---|---|
| Account and published content | Until the account is deleted |
| IP address fingerprints (anti-abuse) | 2 days |
| Moderation action log | 3 years (evidence in the event of a dispute) |
| Inactive accounts with no contribution | 3 years, then deleted |
Your rights
The GDPR gives you rights of access, rectification, erasure, restriction, objection and portability.
In practice:
- View and correct your data: from your settings.
- Export your data as a readable file: button in your settings.
- Delete your account: button in your settings. Deletion is permanent and immediate.
For anything else: noreply@ikaspot.eu. We reply within one month.
If you disagree with how we handled your request, you can lodge a complaint with the CNIL, the French data protection authority, or with the supervisory authority of the country where you live.
What happens when you delete your account
- Your account, your email address and your username are permanently erased.
- Your spots, photos, comments, favorites and votes are deleted.
- Comments others left on your spots disappear along with them.
- The moderation log keeps a record of past actions, without your identity, for evidential purposes.
Processors
| Provider | Role | Location |
|---|---|---|
| Supabase Inc. | Database, accounts, photo storage | Union européenne (Paris) |
| OVH | Application hosting | Roubaix |
| OpenFreeMap | Map backgrounds. Your browser downloads them directly, with no cookie and no identifier. | European Union |
| Photon (Komoot) | Address search. Requests go through our own server, so your IP address is never passed on to them. | Germany |
| DeepL | Automatic translation of spots and comments. Only the published text is sent, from our own server — neither your identity nor your IP address. The translation is kept so it never has to be requested twice. | Germany |
Changes
Any substantial change to this document will be announced on the site. The date it was last updated appears at the top of this page.