Privacy policy

Updated on 30 September 2026

Data controller

[TO COMPLETE : publisher's name], publisher of this site (see the legal notice). Contact: [TO COMPLETE : contact e-mail].

Data we process

1. Contact form

If you write to us, we receive your name, e-mail address and message. They are only used to reply to you (legal basis: your request, legitimate interest). The form is handled by our hosting provider, Netlify. Messages are kept as long as needed to handle your request, then deleted at most 12 months after the last exchange.

2. Hosting

Our hosting provider (Netlify) processes technical connection data (IP address, browser, pages requested) to run and secure the site. This data may be processed outside the European Union, notably in the United States. [TO CHECK in Netlify’s privacy policy: applicable safeguards and retention period]

The site is funded through the Travelpayouts affiliate network. If you accept in the cookie banner, Travelpayouts scripts and partner search engines (flights, hotels, cars…) may be loaded. They use trackers to attribute a booking to the site and show relevant offers. When you click a partner link, the partner’s site applies its own privacy policy. [TO CHECK in Travelpayouts’ privacy policy: data collected, place of processing, retention period]

You can refuse or withdraw consent at any time: “Manage cookies” button at the bottom of every page, or the cookies page. The site remains fully usable without these trackers.

4. User account (optional)

If you create an account, we store your e-mail address, an encrypted password (which we cannot read), your preferences and a random tracking code. With your consent (box ticked at sign-up, changeable at any time in “My account”), this code is added to the partner links you click. When an affiliate network reports a booking, we store the partner, amount, date, status and reference, and send you a summary e-mail if you asked for it.

  • Legal basis: your consent and the performance of the service you requested.
  • Your e-mail is never shared with networks or partners: only the random code is.
  • Processors: Supabase (accounts and database, European Union region) and Brevo (e-mail delivery, France). [TO CHECK: region chosen when creating the Supabase project]
  • Retention: until you delete your account, which you can do at any time from “My account”; everything is then erased.

5. Remembering your choices

Your cookie choice is stored in your browser for 6 months. If you are signed in, your session and tracking code are also kept in your browser’s local storage, only to make the account work. This information stays on your device.

What we don’t do

  • We don’t sell your data.
  • We don’t use audience measurement tools that set trackers without your consent.
  • We don’t handle any payment: bookings are made directly with partners.

Your rights

Under the GDPR, you have the right to access, rectify, erase, object to, restrict and port your data. To exercise these rights, write to us via the contact page. We reply within one month.

If you believe your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or your local authority.