Privacy policy

Summary

No cookies. No tracking pixels from Big Tech. No data leaves the EU. We use wheremyflow.com (Paris) for cookieless analytics that respect Do Not Track and Global Privacy Control automatically.

What we collect

  • Audience measurement (anonymous, aggregated): page views, referrer, country, device family. No IP stored, no persistent identifier, no cross-site tracking.
  • Forms (contact, report-error, newsletter): the data you voluntarily provide — email address, optional name, message — used solely to reply to you or send the newsletter you subscribed to.

Opt out of audience measurement

Article 21 of the GDPR gives you the right to opt out at any time. Click below to disable wheremyflow.com on this browser. Your choice is stored in localStorage (per-browser, no cross-device).

If your browser sends Do Not Track or Global Privacy Control, opt-out is already automatic.

Subprocessors

  • Clever Cloud (Paris, FR) — hosting
  • Brevo (Paris, FR) — transactional email and newsletter
  • Mistral AI (Paris, FR) — search and beach suggestions
  • wheremyflow.com (Paris, FR) — cookieless analytics

No transfer outside the EU/EEA. No US Cloud Act exposure.

Retention

  • Form messages: 12 months after the conversation closes.
  • Newsletter contacts: until you unsubscribe (one click).
  • Audience aggregates: 25 months.
  • Raw event logs: 90 days.

Your rights

Access, rectification, deletion, portability, objection, restriction (art. 18 GDPR) and the right not to be subject to an automated decision (art. 22 GDPR — WhereIsMyBeach performs no profiling or automated decision-making). Send a request via the contact form. We answer within 30 days. You also have the right to lodge a complaint with your local data protection authority — for the publisher (France), that is the CNIL.

Deletion request: use the contact form with subject "GDPR deletion request" and the email address you used to subscribe or to write to us. Acknowledgement and full deletion within 30 days.

Legal bases (art. 6 GDPR)

  • Audience measurement: legitimate interest (art. 6.1.f) — opt-out available at any time via the button above.
  • Newsletter: consent (art. 6.1.a) — unticked checkbox, one-click unsubscribe.
  • Contact form: pre-contractual measure at your request (art. 6.1.b).
  • Error report: legitimate interest (art. 6.1.f) — editorial quality.

Data controller

Frédéric Gaveau, personal project, 2 rue Basse, 12190 Estaing, France. Contact: contact form.

Images loaded from third-party CDNs

Photos on beach pages are served from Wikimedia Commons (US), Flickr / SmugMug (US), Pexels, Pixabay and Mapillary. Loading a page transmits your IP address to these hosts. No cookies, no persistent identifiers — only the browser IP, logged by those third parties under their own policies.

Last updated

This policy was last updated on 9 May 2026.