Privacy policy
Last updated: 3 November 2026
Your GPX file never leaves your browser. The preview and the PDF are made on your own device; we store no GPS track. Two exceptions: if you ask for the free PDF or send a custom request after importing your own route, we keep its simplified shape for 30 days, with no times and no health data, so that you can get the same poster back.
Data controller
Alexandre Inukai (Map My Life), 15 chemin de Boutary, 69300 Caluire-et-Cuire, France — contact@mapmylife.fr.
What we collect, and why
| Data | What for | Legal basis | How long we keep it |
|---|---|---|---|
| GPS track (GPX file) | Drawing the poster | — | Nothing is kept: it stays in your browser |
| E-mail address, when you ask for the free PDF | Sending you the PDF’s link, then keeping track of the posters asked for | Your request, then legitimate interest | 3 years after your request, then deleted |
| The free PDF and, if you imported your own route, its simplified shape (no times, no health data) | Letting you download it, and order a print of the same poster | Your request | 30 days, then deleted |
| The free PDF poster’s settings (race, style, text) and its number of downloads | Knowing which poster you asked for, and whether the file reached you | Legitimate interest | 3 years, with your e-mail address |
| E-mail address, a week after you downloaded your free PDF | Sending you a single follow-up to print the same poster, with a link to opt out | Legitimate interest (you asked for this poster) | 30 days, with the PDF |
| E-mail address and proof of your consent (date, wording of the box), if you tick the newsletter box | Sending you the newsletter | Your consent | Until you unsubscribe, or 3 years after we last hear from you |
| IP address | Limiting abuse (number of requests) | Legitimate interest | In the server’s memory, 24 hours at most |
| E-mail address, delivery name, address and phone number, details of the poster, amount paid | Making, delivering and invoicing the order | Performance of the contract | 10 years (accounting obligation) |
| Gift card: the buyer’s e-mail address, the first names and message written on the card, the code and its balance | Issuing the card, sending it, keeping track of what is left on it | Performance of the contract | 10 years (accounting obligation) |
| The poster’s final file | Printing it, and reprinting it if the parcel arrives damaged | Performance of the contract | 1 year |
| A thumbnail of the poster (a few centimetres), sent at payment | Showing it in the confirmation e-mail | Performance of the contract | 30 days, then deleted |
| E-mail address, message and poster preview of a custom request | Replying to you | Your request | 3 years after the last contact |
| The poster settings of a custom request and, if you imported your own route, its simplified shape (no times, no health data) | Sending you back a link that reopens the same poster | Your request | 30 days, then deleted |
| Pages viewed, without cookies or identifiers | Measuring the audience | Legitimate interest | Aggregated, anonymous data |
Who receives this data
- Stripe (payment): your contact details and your payment. We never see your card number.
- Our partner printer, based in the European Economic Area (printing and shipping): the poster’s file, and your delivery name, address and phone number.
- Hostinger International Ltd (hosting of the site, in Cyprus): the server’s technical logs, IP addresses included.
- Supabase (database, servers in Ireland): orders and requests.
- Resend (sending e-mails): your e-mail address and the content of the message.
- Protomaps (base maps) and Amazon Web Services (terrain): your browser loads the maps directly from them, so they see your IP address.
- OpenStreetMap’s public servers in Europe (Overpass): if you import your own route, your browser asks them for the place names in the rectangle around it, to place the waypoints.
- If you paste a route’s link (Strava, Tracedetrail), our server fetches it for you and does not keep it.
Supabase, Resend, Protomaps and Amazon Web Services are American companies. Transfers outside the European Union are covered by the European Commission’s standard contractual clauses.
We neither sell nor rent any data. The newsletter only goes to people who ticked the box for it, and every issue has an unsubscribe link. After a free PDF, you get one follow-up e-mail, a week after you download it, and no other: it carries a link to opt out in one click. Our e-mails contain no open or click tracking.
Cookies
The site sets no advertising or audience-measurement cookies: Umami measures the audience without cookies. When you order a print, your browser keeps the poster’s file in its local storage while you pay, then deletes it as soon as it has sent it to us (after a week at the latest). When you arrive through a partner’s link, your browser keeps their code there for 7 days, to place it in your basket, and notes whether it already told us you began a poster or put one in the basket: the partner only sees how many people did. When the payment page opens, Stripe sets its own cookies, needed to fight fraud (stripe.com/legal/cookies-policy). None of this requires a consent banner.
Your rights
You can access your data, correct it, delete it, object to its use or take a copy of it: write to contact@mapmylife.fr, and we reply within a month. You can also complain to the CNIL, the French data protection authority (cnil.fr).