Privacy policy
Last updated: 28 October 2026
Data controller
[To be completed: identity and contact of the data controller.]
Data processed
Nationality(ies), passport issuing country, country of residence where needed, destination, dates and purpose of the trip; for accounts: email address and, if you provide them (everything is optional), your first and last name, date of birth, postal address and mobile phone number, your family members' first names or nicknames, the country and expiry date of each person's passports and your country of residence (encrypted).
What we do not collect
No passport number, no photo or copy of identity documents. Your date of birth is only stored if you enter it yourself in your personal details.
Purposes
Determining the applicable entry requirements, monitoring changes at your request and alerting you by email.
Retention
Trips are deleted automatically six months after their return date. Your account is kept until you delete it.
Security
Personal data is encrypted in the database, traffic is encrypted and access is strictly limited.
Cookies
Only strictly necessary cookies (session, language) are used. No advertising trackers or third-party analytics.
Audience measurement
We count the steps of the journey (arrival, check, sign-up, saved trip, monitoring, alert opened) using simple per-day counters hosted by us. No cookie, identifier, IP address, passport or trip detail is stored, and no third-party tool is used: these figures cannot be linked to a person.
Your rights
You can export or delete your data from your account at any time, and exercise your rights of access, rectification and objection. You may lodge a complaint with your data protection authority.
Legal bases
Your account and saved trips rely on performing the service you request (GDPR Article 6(1)(b)); reminder and change alerts rely on your consent, which you can withdraw at any time in “My account”; site security (rate limiting, bot protection) relies on our legitimate interest.
Recipients and processors
Your data is never sold. It is only accessible to authorised staff and to our technical providers: the host of the site and database, and the email sending service (alerts, account confirmation, support replies). These providers act on our instructions. No data is passed to advertising networks. The up-to-date list of providers and their country of establishment is available on request.
Transfers outside the European Union
We favour providers established in the European Union. If a provider processes data outside the Union, it does so under appropriate safeguards (adequacy decision or standard contractual clauses).
Messages to support
Questions and reports sent from “My account” are stored with your account so we can reply and improve the rules; they are deleted with your account.
Anti-bot measures
To protect forms we use a time-limited token, a honeypot field and a per-IP request counter kept very briefly in memory. No third-party tracking service is used.
Minors and relatives
You may save family members, including minors, only with their consent or that of their legal representative. We do not collect data directly from a minor.
Exercising your rights
Exporting or deleting your data is self-service from “My account”. For any other right (access, rectification, restriction, objection, portability), write to us from “Help and contact” in “My account”: we reply within one month, after checking your identity. If you disagree, you may complain to your data protection authority (in France, the CNIL, cnil.fr).