Legal · GDPR
Privacy policy
The Locals' Guide collects the bare minimum needed to run your travel list. No advertising, no selling of data, no tracking tools.
Last updated: 9 October 2026
Data controller
The website ebook.martinvantalon.com (“Nice & the French Riviera · The Locals' Guide”) is published by Martin Vantalon, independent developer. For any question about your data: martin.vantalon@gmail.com.
Data we collect
You can browse the guide without an account: no personal data is stored in that case.
If you create an account (email and password, magic link or “Continue with Google”), we store:
- Your email address, to identify you and send you sign-in emails;
- Your name and profile picture, only if provided by Google when you sign in with Google (or entered when you sign up);
- Your favourites and itineraries (the places you save and the lists you create).
If you use a password, it is never stored in plain text: it is encrypted by our authentication provider.
Signing in with Google
If you choose “Continue with Google”, we only request the openid, email and profile permissions, i.e. your email address, name and profile picture. We do not access any other data from your Google account (Gmail, Drive, contacts, calendar…).
This information is used solely to create and identify your account on the Locals' Guide. It is never sold, shared with third parties, used for advertising or used to train artificial intelligence models. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Why, and on what legal basis
- Managing your account and your list (favourites, itineraries): performance of the service you request by creating an account.
- Sharing a list: only if you make it public yourself. A shared list shows its title and places, never your email.
- Keeping the site secure (sessions, abuse prevention): legitimate interest.
Service providers and hosting
Your data is processed by technical providers, solely to run the site:
- Supabase: database, authentication and photo storage;
- Vercel: hosting and delivery of the site, anonymous visit statistics;
- Google: only if you choose to sign in with Google;
- CARTO: base maps shown on the interactive map (like any web server, it receives your IP address when map tiles load).
Some of these providers may process data outside the European Union; such transfers are covered by the European Commission's standard contractual clauses. The “Google Maps” and “Waze” links on a place page send nothing until you click them.
How long we keep your data
Your data is kept for as long as your account exists. If you ask for your account to be deleted, your email, profile, favourites and itineraries are permanently erased within 30 days.
Your rights
Under the GDPR, you can at any time access, correct or export your data, object to its processing or ask for it to be deleted, by writing to martin.vantalon@gmail.com. We reply within 30 days.
You can also remove the Locals' Guide's access to your Google account at myaccount.google.com/connections, and lodge a complaint with the French data protection authority, the CNIL.
Changes
This policy may change as the site evolves. The last update date is shown at the top of the page; registered users will be notified by email of any significant change.