Privacy Policy

Who is responsible

The data controller is StreetLens, a French company (SAS) registered in Paris (RCS Paris 103 827 044), located at 47 rue Vivienne, 75002 Paris, France. For any question about your data, contact hello@backfrommytrip.com.

What we collect

• Account data: your email address and the display name you choose. Used to create and secure your account.
• Content you publish: trip reports, photos, questions, answers, and comments. Published content is public by design.
• Photos: the photo we publish carries no location or device metadata (EXIF) — it is removed in your browser, before the published copy is sent. When a photo does carry a location and a date, the original is also sent, to a private space — never public, used only to verify the trip, then deleted: 14 days from upload at the latest. It is checked automatically and never appears in our review queue, so no one is shown it. The coordinates and the exact time are never written down: we record the town it matched, and nothing that could place you at a point and a minute.
• Verification documents: if you choose to verify a trip, your booking confirmation or receipt is stored in a private space, used only to verify the trip, then deleted. Documents that are not reviewed are deleted automatically after 14 days. The check only needs the place and the dates — we encourage you to black out your name, booking number, price, or anything else personal before uploading; the document is just as valid.
• Follows: the destinations you choose to follow, so we can send you the reports you asked for.

What we do not keep

• Verification documents are deleted after checking — we keep only the matched place and dates, never names, prices, or booking numbers.
• Photo location data (EXIF) is removed before the published photo leaves your device, and the coordinates are never written down — not to a database field, not to a log — even when the original is used to verify a trip. We keep only the town it matched; the original itself is deleted after the check, 14 days at the latest.
• Your Polarsteps export zip is read in your browser only — it is never uploaded and never stored.
• Tracked location historyfrom an imported trip is checked in memory during the import and never stored — we keep only “it matched”.
• No advertising or tracking: no ad trackers, no profiling, no sale of data.

Who processes it

We use a small number of service providers to run the site:

• Supabase Inc. — database, authentication, and file storage. Data is hosted in the European Union.
• Vercel Inc. — website hosting and cookieless, aggregated audience analytics.
• OpenAI — automated checks on submitted content (moderation) and reading verification documents. Your data is not used to train their models.
• Resend Inc. — sending emails: sign-in links and, later, notification emails you opt into.
• Nominatim and Photon (OpenStreetMap) — converting destination and place names into map coordinates. No personal data is sent.

Cookies

We only use essential cookies, needed to keep you signed in. We do not use advertising or tracking cookies. Our audience analytics are cookieless and anonymous. This is why the site has no cookie banner: there is nothing to consent to.

How long we keep data

• Account data: as long as your account exists.
• Published content: as long as you keep it published.
• Verification documents: deleted after review, or after 14 days at the latest.

Your rights

Under the GDPR you can ask to access, correct, delete, or export your personal data, and to object to or restrict its processing. To exercise any of these rights, write to hello@backfrommytrip.com from the email address linked to your account. We answer within one month.

If you believe your rights are not respected, you can file a complaint with the French data protection authority, the CNIL (cnil.fr).

Changes to this policy

If we change this policy, we update this page and the date at the top. The current version is always at backfrommytrip.com/privacy.