Privacy policy

1. Data controller

The controller of personal data is Wiki-Climb (SASU), 47 rue Vivienne, 75002 Paris, France — RCS Paris 105 887 582.

2. Data collected

We collect the following data:

• Registration: username, email address, password (hashed)
• Profile: photo (optional), description (optional)
• Activity: ticked, liked and projected routes, comments, suggestions
• Technical: IP address (for security and rate limiting)

We collect no data via third-party cookies, advertising trackers or behavioural analytics tools.

3. Use of data

Your data is used exclusively to:

• Operate your account (login, profile)
• Display your activity on your profile (ticks, statistics)
• Enable community interactions (comments, messages, friends)
• Protect the website against abuse (rate limiting, banning)

Your data is never sold, rented or transferred to third parties for commercial purposes.

4. Cookies

Wiki-Climb only uses strictly necessary cookies for the website to function: session cookie (authentication) and language preference.

No advertising or tracking cookies are used.

5. Data retention

Your account data is kept as long as your account is active. If you delete your account, your personal data is erased within 30 days. Validated contributions (approved suggestions) are kept in anonymised form.

6. Your rights (GDPR)

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

• Access: view your personal data
• Rectification: correct inaccurate information
• Erasure: request the deletion of your data
• Portability: retrieve your data in a standard format
• Objection: object to a processing operation

To exercise these rights, contact us via the contact page.

7. Security

We implement technical measures to protect your data: password encryption, HTTPS connection, upload validation and protection against injections.