Privacy policy

1. Who we are

pinata.run is operated by Etienne Pin-Claret, a sole trader, registered in France under SIREN 981502578. They are the controller of the personal data described here. Postal address: 59 rue Henri Becque, 78160 Marly-le-Roi, France.

This policy covers the pinata.run website and any application we publish under that name. It is written under the EU General Data Protection Regulation (GDPR) and the French Data Protection Act.

The site is under construction. Some of what follows describes handling that only begins once you create an account; until you do, sections 3 to 6 simply do not apply to you.

2. The short version

If you read nothing else, read this. The rest of the page is the same thing said precisely.

We ask for a display name and one way to reach you

That is the whole of your profile. We do not ask for your real name, your address, your age or your photo.

We never see your password

Sign-in goes through an identity provider you already use. No password ever reaches us, because we never have one.

Location data is kept apart and expires

It never enters our database, it lives in private European storage, and it is deleted after 30 days.

Everything is hosted in the European Union

Database, storage, cache and application are all hosted in EU regions.

We do not sell anything about you

No data broker, no advertising network, no third-party tracker on the site.

3. What we collect, and why

We only collect what a feature actually needs. Each item below exists because something would break without it.

Your account

A public display name, chosen by you and visible to other people using the service; an e-mail address or a social handle, so we can reach you; the date on which your phone number was confirmed, if you confirmed one; and your preferred units of measurement. We store the date of that confirmation, not the phone number itself.

Records from services you connect

If you connect an account you hold with another service, we receive the records you authorise that service to share: when the record starts, how long it lasted, what kind of effort it describes, and the quantities it measured. We also keep the identifier that service gives each record, so that receiving the same record twice does not count it twice.

Files you send us yourself

You can hand us a file describing a recorded effort instead of connecting an account. We read the same information out of it, and we keep it under the same rules.

Location data

Some of those records contain a series of positions, times and altitudes. We use them only to check that a record is plausible, and to let a human review it if an automated check flags it.

Technical data

Your IP address, seen by our host on every request and used to limit abuse of our forms; standard server logs; and, on the front page, a random identifier stored by your own browser so that a visitor counter does not count you twice. That identifier means nothing outside the counter and is not tied to an account.

What you write to us

If you fill in a form on the site or send us an e-mail, we keep the message and your address for as long as it takes to deal with it, and a reasonable time afterwards in case you write again.

4. Our legal grounds

GDPR requires a named ground for every use of personal data. Ours are these.

Performance of a contract (art. 6.1.b)

Operating your account and the features you asked for, including receiving and counting records you choose to send us.

Your consent (art. 6.1.a)

Connecting an outside account, showing your display name publicly, and any optional message we send you. You can withdraw consent at any time; withdrawing it does not undo what was lawful beforehand.

Our legitimate interests (art. 6.1.f)

Keeping the service standing up and honest: rate limits, abuse prevention, plausibility checks, aggregate visitor counts, and security logging. We have weighed these against your interests and kept them narrow.

Legal obligation (art. 6.1.c)

Keeping what accounting or other law requires us to keep, for as long as it requires.

5. Who else sees it

We do not sell personal data, and we do not share it for anyone else's advertising. Data reaches four kinds of third party, and no others.

Other people using the service

Only your public display name and the totals you have contributed. Never your e-mail address, never a location, never anything measured about your body.

Our processors

Companies that operate infrastructure on our behalf, under contract, with no right to use your data for themselves: our application host, our database, authentication and file storage provider, our cache provider, and our e-mail provider. Each processes only what its job requires.

Services you connect yourself

When you link an outside account, that service learns that you linked it, and it decides what to share with us according to the permissions you grant. Its own privacy policy governs what it does on its side. You can revoke the link there or here at any time.

Authorities

Only where the law compels us, and only what it compels.

6. Where it lives, and for how long

Our database, our file storage, our cache and our application are all hosted in European Union regions. Where one of our processors is established outside the EU, the transfer is covered by the European Commission's standard contractual clauses, and we keep the data sent to them to the minimum that the service requires.

Account data

Kept while your account exists, and erased when it is deleted.

Records you contributed

Kept while your account exists; they are removed with it.

Location data

Deleted 30 days after we receive it, by an automatic sweep performed every day. It is never written to our database.

Deletion requests

Carried out within 30 days of the request.

Messages and enquiries

Kept up to three years after our last exchange, then deleted.

Server and security logs

Kept by our host for a short operational period and then rotated out.

7. Automated checks

Every record we receive is scored automatically for plausibility. A record that scores above a threshold is not rejected: it is held aside and shown to a human, who decides.

No decision with a legal or similarly significant effect on you is ever taken by a machine alone. If a record of yours is held, you can ask us to review it, explain the result, and correct it.

8. Your rights

Under GDPR you have the rights below, free of charge, and we answer within one month.

Access

A copy of the personal data we hold about you.

Rectification

Correction of anything inaccurate or incomplete.

Erasure

Deletion of your account and everything attached to it.

Restriction and objection

Ask us to stop a particular use, including any use we base on our legitimate interests.

Portability

Receive the data you gave us in a structured, machine-readable format.

Withdrawing consent

At any time, for anything we do on the basis of consent.

Instructions after death

French law lets you tell us what should happen to your data afterwards. Write to us and we will record it.

Complaining

If we get it wrong, you can complain to the CNIL, the French data protection authority, at cnil.fr.

9. Deleting your account

You can ask us to delete your account from your account page, or by writing to us. Deletion is handled by a person for now, within 30 days.

When it happens, it cascades: your profile and every record attached to it are removed from the database, and any location data still within its retention window goes with them. What survives is limited to anonymous aggregates that say nothing about you, and anything the law obliges us to keep.

10. Cookies and browser storage

There is no advertising cookie on this site, no third-party analytics script, and nothing that follows you elsewhere. Nothing here requires a consent banner, because everything here is strictly necessary or stored by your own browser for your own benefit.

Session cookie

Set once you sign in, so that the next page knows it is you. Strictly necessary.

Unit preference

Stored by your browser so the site shows the units you chose. Never leaves your device unless you have an account.

Visitor identifier

A random value your browser keeps so the visitor counter does not count you twice. Refuse storage and the counter simply counts you more than once.

Maintenance cookie

Used by the site owner to preview work in progress. It is set only by someone holding a secret token.

11. How we protect it

No one can promise perfect security. Here is what we actually do.

No passwords

We never hold one, so we cannot leak one.

Encryption in transit

The whole site is served over HTTPS, with strict transport security.

Row-level isolation

The database enforces, row by row, that one account cannot read another's data — not merely the application.

Private storage

Location data sits in a private bucket that is not reachable from the public internet.

Rate limiting

Forms and sign-in are throttled, by address and by request.

Secrets stay on the server

Our build is checked so that no server credential can reach your browser.

12. Children

The service is not intended for anyone under 15, and we do not knowingly collect their data. If you believe a child has created an account, write to us and we will delete it.

13. Changes to this policy

When we change this page we move the date at the top. If a change materially affects how we handle your data, we will tell account holders directly before it takes effect, and ask again for consent where consent is what the change relies on.

14. Contact

For anything on this page — a question, a request about your rights, or a complaint — write to privacy@pinata.run.

We have not appointed a data protection officer: our processing is not of a kind that requires one. Your request reaches the person who operates the service.