1. Scope

This Privacy Policy applies to:

  • the Paris on the Spot mobile application (hereinafter “the Application”), available on iOS and Android;

  • the Paris on the Spot website (hereinafter “the Website”), which operates as a blog and does not require account creation or authentication.

Neither the Application nor the Website requires you to create an account or provide personal information to access content. This policy does not apply to third-party services or websites that may be referenced or linked within our services.

2. Data Controller

The data controller responsible for personal data collected through the Application and Website is:

French Address EURL

15 rue des Halles, 75001 Paris, France

RCS Paris 892146184

Contact: bonjour@paris-on-the-spot.com

As a French company subject to European Union law, Paris on the Spot processes personal data in compliance with Regulation (EU) 2016/679 of 27 April 2016 (the General Data Protection Regulation, hereinafter “GDPR”) and the French Data Protection Act (Loi Informatique et Libertés).

3. What Data We Collect and Why

3.1 Data you provide directly

Paris on the Spot does not require you to create an account on either the Application or the Website. We do not collect your name, email address, or any other directly identifying information through these services.

If you contact us by email at bonjour@paris-on-the-spot.com, we will collect the information you provide in that communication solely for the purpose of responding to your request.

3.2 Newsletter subscription

If you subscribe to the Paris on the Spot newsletter through the Website, we collect your email address. This address is used solely to send you the newsletter and any related updates. We do not use it for any other purpose.

Subscription is based on your explicit consent. You can unsubscribe at any time by clicking the unsubscribe link included in every newsletter, or by contacting us at bonjour@paris-on-the-spot.com. Withdrawal of consent does not affect the lawfulness of processing carried out before you unsubscribed.

Your email address is collected through Squarespace (our website hosting platform) and transferred to Shopify, through which newsletters are sent via Shopify Email. Both platforms act as data processors on our behalf under data processing agreements in compliance with GDPR. Their respective privacy policies are available at https://www.squarespace.com/privacy and https://www.shopify.com/legal/privacy.

3.3 Analytics data — Application

When you use the Application, certain technical and behavioral data is collected automatically through two analytics services:

  • Firebase Analytics (Google LLC): collects app usage events such as which sections you visit, which monuments you select, and which content categories you browse; session duration and frequency of use; device type, operating system version, and app version; a randomly generated device identifier not linked to your identity; and country or region derived from your IP address (the full IP address is not stored).

  • Microsoft Clarity: records anonymized behavioral data such as navigation patterns and interaction heatmaps, to help us understand how users move through the Application and identify areas for improvement. Clarity does not collect personally identifiable information.

This data is collected in aggregated and anonymized form wherever possible. It does not allow us to identify you personally. We do not collect your precise location, your contacts, your photos, or any other content stored on your device.

3.4 Analytics data — Website

When you visit the Website, certain technical and behavioral data is collected automatically through three analytics services:

  • Google Analytics (Google LLC): collects page views, session duration, traffic sources, device type, and approximate geographic location derived from your IP address.

  • Squarespace built-in analytics: collects aggregated traffic statistics including page views, referral sources, and visitor geography. This data is processed directly by Squarespace as part of its hosting service.

  • Microsoft Clarity: collects anonymized behavioral data such as scroll depth, click patterns, and session recordings to help us understand how visitors interact with the Website.

The Website does not use advertising cookies or tracking technologies for commercial targeting purposes.

3.5 Push notifications — Application

The Application may send you push notifications if you grant permission to do so on your device. Notifications may include content updates, seasonal recommendations, or practical information relevant to your Paris visit. Your device identifier is used to deliver notifications and is not shared with third parties for any other purpose. You can withdraw your consent to receive notifications at any time through your device settings.

3.6 Purchase data

The purchase of the Application is processed exclusively by Apple (App Store) or Google (Google Play). Paris on the Spot does not receive or store your payment information, billing details, or Apple/Google account data. Any questions relating to your purchase should be directed to the relevant app store.

4. Legal Basis for Processing

Paris on the Spot processes the data described above on the following legal bases:

  • Legitimate interest: the collection of anonymized analytics data on the Application and Website is necessary for us to understand how our services are used and to improve them. This interest does not override your rights, as the data is not used to identify or profile you individually.

  • Consent: newsletter subscription and push notifications are based on your explicit consent, which you may withdraw at any time.

  • Contractual necessity: if you contact us directly, we process your contact details solely to respond to your request.

5. How Long We Keep Your Data

Analytics data collected through Firebase Analytics is retained for a maximum of 14 months, in accordance with Google’s default retention settings. Microsoft Clarity retains session data for 13 months. Google Analytics retains data for 14 months by default. Squarespace analytics data is retained in accordance with Squarespace’s own data retention policy.

Newsletter subscriber email addresses are retained for the duration of the subscription and for a period of three (3) years following unsubscription, after which they are permanently deleted from our systems.

Push notification delivery identifiers are retained for as long as you have notifications enabled. They are deleted when you withdraw consent or uninstall the Application.

If you contact us by email, we retain your correspondence for as long as necessary to respond to your request and for a reasonable period thereafter, not exceeding three (3) years.

6. Data Sharing and Third Parties

6.1 Analytics and tracking providers

Analytics data is processed by the following third-party providers, each acting as a data processor on our behalf under a data processing agreement in compliance with GDPR:

 These providers may transfer data to servers located outside the European Union. Such transfers are carried out under appropriate safeguards, including Standard Contractual Clauses approved by the European Commission.

6.2 App store platforms

Apple and Google collect their own data when you download and use applications through their respective stores. This data collection is governed by their own privacy policies, which are independent of this document. Paris on the Spot has no access to or control over the data collected by Apple or Google in this context.

6.3 No sale of data

Paris on the Spot does not sell, rent, or trade your personal data to any third party. We do not share your data with advertisers or any commercial partners.

6.4 Legal disclosures

We may disclose data to a competent authority if required to do so by applicable law or valid legal process.

7. Your Rights

Under the GDPR, you have the following rights with respect to your personal data:

  • Right of access: you may request confirmation of whether we hold personal data about you and, if so, a copy of that data.

  • Right to rectification: you may request correction of any inaccurate personal data we hold about you.

  • Right to erasure: you may request deletion of your personal data, subject to any legal obligations that require us to retain it.

  • Right to restriction: you may request that we limit the processing of your personal data in certain circumstances.

  • Right to object: you may object to the processing of your personal data where we rely on legitimate interest as our legal basis.

  • Right to withdraw consent: where processing is based on your consent (in particular for push notifications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

  • Right to lodge a complaint: you have the right to lodge a complaint with the French data protection authority (Commission Nationale de l’Informatique et des Libertés, CNIL) at www.cnil.fr, or with the supervisory authority of your country of residence within the European Union.

 To exercise any of these rights, please contact us at bonjour@paris-on-the-spot.com. We will respond within 10 days of receiving your request.

Please note that because most analytics data is collected in anonymized form and not linked to your identity, it may not always be possible to locate or delete data associated with a specific individual.

8. Cookies and Tracking Technologies

8.1 Application — no cookies

The Application is a native mobile application and does not use cookies. Firebase Analytics and Microsoft Clarity use randomly generated app instance identifiers stored locally on your device. These identifiers are used solely to measure how the Application is used in aggregate and are not linked to your personal identity. They reset automatically if you uninstall and reinstall the Application.

8.2 Website — cookies

The Website uses cookies and similar tracking technologies through Google Analytics, Squarespace, and Microsoft Clarity. These are analytics cookies only. the Website does not use advertising or targeting cookies.

Cookies used on the Website may include:

  • Google Analytics cookies: used to measure traffic and user behavior on the Website. These cookies collect anonymized data including pages visited, session duration, and approximate location.

  • Squarespace cookies: used by the hosting platform for basic site functionality and traffic measurement.

  • Microsoft Clarity cookies: used to collect anonymized behavioral data such as scroll patterns and click activity.

 You can manage or refuse cookies at any time through your browser settings. Disabling analytics cookies does not affect your ability to browse the Website.

8.3 What we do not track

Neither the Application nor the Website tracks your precise GPS location, your browsing activity outside our services, your contacts or photos, or any cross-app or cross-device activity for advertising purposes. We do not use advertising identifiers (IDFA on iOS, GAID on Android).

8.4 Push notifications

If you have granted permission for push notifications, your device identifier is used solely to deliver those notifications. You can withdraw this permission at any time through your device settings. Doing so will stop all future notifications without affecting your access to the Application.

8.5 Analytics opt-out

You can limit or disable analytics data collection at any time through your device privacy settings (for the Application) or your browser settings (for the Website), without affecting your ability to use either service.

8.6 iOS App Tracking Transparency

Paris on the Spot does not engage in cross-app tracking and does not use your device’s advertising identifier (IDFA). As a result, the Application does not trigger Apple’s App Tracking Transparency prompt. If this changes in a future version of the Application, this policy will be updated and users will be presented with the appropriate consent prompt.

9. Data Security

Paris on the Spot takes reasonable technical and organizational measures to protect data collected through the Application and Website against unauthorized access, loss, or alteration. Analytics data is processed through Firebase, Google Analytics, Squarespace, and Microsoft Clarity, each of which maintains its own security infrastructure and industry-standard certifications.

10. Children’s Privacy

The Application and Website are open to users of all ages and do not contain age-restricted content. We do not knowingly collect personal data from children under the age of 13. Because no account is required and no personal information is voluntarily submitted through either service, the risk of inadvertent collection of children’s data is minimal.

If a parent or guardian believes that their child has submitted personal data to us (for example, via email), they may contact us at bonjour@paris-on-the-spot.com and we will take prompt steps to delete that information.

11. Updates to This Policy

Paris on the Spot may update this Privacy Policy from time to time to reflect changes in our services, applicable law, or our data practices. The updated policy will be made available within the Application and on the Website. The date of the most recent update is indicated at the top of this document.

Continued use of the Application or Website after any update constitutes acceptance of the revised policy.

12. Contact

For any question, request, or complaint relating to this Privacy Policy or the processing of your personal data, please contact us at: bonjour@paris-on-the-spot.com

French Address EURL . 15 rue des Halles, 75001 Paris, France