Privacy policy
Data controller
Philippe Conseil, publisher of Kiptrail. For any question about your data: Contact page (subject “My personal data”) or autopc44@gmail.com.
Data collected
Account: email, display name, hashed password or Google identifier, avatar colour. Profile, if you provide them: town, bio, photo, date of birth, sex, UTMB index and link. Content: GPX or FIT tracks, routes drawn on the map, photos, texts, times, race plan, albums, patches. Interactions: cheers, comments and shared photos, Contact form messages, answers to the “Give feedback” questionnaire. Technical: server logs (IP address, date, requested page, browser) for security.
Purposes and legal bases
Providing the service you request (performance of the contract); securing and improving it and understanding your feedback during the beta (legitimate interest); sending you emails useful for your account (address confirmation, forgotten password, new comments, which you can turn off). Your date of birth is used only to compute your age and category on race day; it is never displayed. Kiptrail neither sells nor rents your data, and shows no advertising.
Photos and location
The GPS position of your photos is used to place them along the route; it is removed from published images. Photos shared by other members are also published without their GPS coordinates. Heart rate is never collected.
Providers and recipients
Hosting: OVH SAS (France). Email delivery: Brevo (Sendinblue SAS, France), which receives your email address and the message content. Sign-in with Google, if you choose it: Google Ireland Limited. Computing drawn routes: OpenRouteService (HeiGIT gGmbH, Germany), which only receives waypoint coordinates, not your identity. Elevation and weather: Open-Meteo, which only receives coordinates. Maps and place search: OpenStreetMap (your browser sends its IP address to the map servers to display them). Claude connector, if you enable it: Anthropic (United States) then accesses your pages as you authorised, and your conversations with Claude are governed by Anthropic's terms and privacy policy.
Transfers outside the European Union
Your data is hosted in France. Some providers you choose (Google, Anthropic) may process data outside the European Union, with the safeguards provided by the GDPR (standard contractual clauses or adequacy decision).
Retention periods
Account, profile and content: for as long as your account exists; everything is erased when you delete it (daily backups are overwritten within 7 days). Comments and photos shared on another member's page: deleted with your account. Contact messages: 3 years. Beta questionnaire answers: 3 years at most. Server logs: about 14 days.
Cookies
Kiptrail only uses strictly necessary cookies and storage: sign-in session, chosen language, display preferences. No advertising trackers or audience measurement tools: no consent is requested and no banner is shown.
Security
Encrypted connection (HTTPS), hashed passwords, restricted server access, daily backups. In the event of a data breach posing a risk to you, you will be informed.
Your rights
You can access, rectify and export your data (from your profile, Account tab), object to certain processing, request restriction and delete your account at any time. For any request: Contact page or autopc44@gmail.com. You can also lodge a complaint with the CNIL (cnil.fr). Last updated: 15 October 2026.