Data collected
As part of audience measurement, we collect the following data:
- Pages visited and interactions (tab clicks, filters, charts)
- Visit source (search engine, direct link, social network)
- Device type (mobile or desktop) and screen size
- Browser language
- Country and approximate city (derived from IP address, which is then truncated)
- A random identifier stored in your browser to recognise returning visitors
- The text of searches (town, company, association), to learn what visitors look for and what the site cannot find; e-mail addresses and phone numbers are masked
- Questions asked to the assistant (question text, city, data consulted), to learn what visitors look for and what the site lacks. Do not write personal data in them
Analytics cookie
A cookie named ph_phc_CNGgxUeUcggdSxsq67LtCWSi9wM4FyAzJF6GGdZtmxbW_posthog is placed on your browser for a maximum duration of 12 months. It contains only a random identifier that cannot personally identify you. This cookie is used exclusively for audience measurement.
In accordance with the recommendations of CNIL, this cookie is exempt from consent because it is strictly limited to audience measurement, is not cross-referenced with other processing, and does not enable tracking across other websites.
Data hosting
Data is processed by PostHog on servers located in the EU (European Union). Your IP address is only used to derive the country and approximate city, then discarded without being stored. Session recordings (optional, see below) are deleted after 30 days.
Data alert (e-mail)
If you leave your e-mail address to be told when a town’s figures change, it is used for that only. It is stored at Resend, our e-mail provider, with the towns you follow, the rhythm you chose (the essentials, or also each month) and the language of the page. A welcome message leaves at once, with a link to take you off if it was not you. Every message has an unsubscribe link, which removes the address from the list. To have it deleted, write to us.
Technical providers
These providers receive personal data when you use the site. The list says what each one receives and where it is based.
- Vercel (site hosting, United States): every request goes through its servers, which see the IP address, the page requested and the browser headers, and keep technical logs of them. Vercel also measures how fast pages display (Speed Insights), without a cookie. Audience-measurement requests go through the site before reaching PostHog.
- PostHog (audience measurement and, if you switch it on, session recording; European Union): the data listed above.
- Resend (sending e-mails, United States): your e-mail address and your message when you write through the contact form or report an error (the address is optional for a report); your e-mail address, the towns you follow, the rhythm you chose and the language when you sign up for an alert.
- Anthropic (the assistant's answers, United States): the text of the questions asked to the assistant, with the conversation so far, is sent to it to produce the answer. Do not write personal data in them.
- Google Cloud (storage of the published data files, European Union): the site reads its own files there; no data about visitors is sent to it.
For the providers located in the United States, transfers rely on the EU–US Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023), under which Vercel and Resend are certified, and, for Anthropic, on the European Commission's standard contractual clauses included in its data processing terms.
Resources loaded from other servers
Your browser downloads the fonts from Google Fonts (Google, United States) and, on pages with a map, the map background from Esri (ArcGIS, United States). As with any web resource, these servers receive your IP address; the site sends them nothing else.
Your rights
Under the General Data Protection Regulation (GDPR), you have the right to access, rectify and delete your data. You can also opt out of analytics using the button below.
If your browser sends the Global Privacy Control (GPC) signal, analytics is automatically disabled.
For any questions about data protection, you can visit the CNIL.