Who is responsible
AfterTourTips is responsible for the personal data processed through this service. Contact: hello@aftertourtips.com.
Data we process
Account details (email, public name and optional profile information), lists and recommendations you create, favourites, reviews, discount submissions, contact messages, authentication and security logs, and analytics data only when you consent.
Why and on what basis
We process account and service data to provide the service and perform our agreement with you; security, moderation and service improvement for our legitimate interests; legal records where required by law; and optional audience measurement only with your consent.
Recipients and processors
Data is available only to people who need it to operate the service and to our technical providers, notably Supabase (database and authentication), Hostinger (hosting), and Google Analytics only after consent. Public profiles, public lists and approved reviews are visible to anyone.
International transfers
Some providers may process data outside the European Economic Area. We rely on the safeguards offered by those providers, such as an adequacy decision or the European Commission’s standard contractual clauses, where applicable.
Retention
Account data is kept while your account is active, then deleted or anonymised when no longer needed, subject to legal and security retention. Contact messages are normally retained for up to 24 months. Consent choices are retained for six months before we ask again.
Your rights
You may request access, correction, deletion, restriction, portability or object to processing, and withdraw consent at any time. Email hello@aftertourtips.com. You may also complain to the CNIL at cnil.fr.
Security and updates
We use access controls and authenticated services designed to protect your data. No online service is risk-free. We may update this policy and will show the revision date here.