Legal notice and privacy

PRIVACY

Data we collect

• Audience measurement (visit statistics): pages viewed, date/time, language, browser and system type, approximate country/city, IP address, referring page. Subject to your consent.
• Language preference: a technical cookie (qra_lang) remembers the language chosen. Required for the site to work.
• Geolocation: only when you click "Directions". Your position is used to plot the route to the plaque; it is sent to our route-planning provider (see §4). Subject to your consent; not stored by QRAvenue.
• Player account (visit log, game, investigation): your email and your username and, if you provide them, your country and city. We record your answers and points (date, plaque, city) to keep your scores and the rankings. Only your username and, if you add one, your photo are shown publicly; your email never is. The photo is cropped and re-saved by us; you can remove it at any time, and it is deleted with your account. No password is required.
• Playing without an account (where the town has chosen this option): no personal data is collected. Your answers and points are kept in your browser session (cookie QRASESSID), never in our database, and disappear after 24 hours at most. If you then create an account, they are transferred to it and deleted from the session.
• Information from the town or institution (optional box, unticked by default): if you tick it, your email, your username and the date of your consent are made available to the organisation named next to the box (the municipality or institution that manages the plaques), so that it can send you its information and news. Leaving it unticked makes no difference to the game.
• Proof of presence for the game: the game is played in front of the plaques. During your visit, we record which plaques you have scanned (with the camera, a QR app or our scanner): this is what unlocks their question. If you have a player account, these scans are added to your visit history. Your position is not used to play.
• Camera (built-in scanner): only when you open the scanner. The image stays on your phone: only the content of the QR code read is used to open the plaque. No image is sent or stored.
• Limiting sign-in attempts: to prevent emails from being tried in bulk, we count attempts per Internet connection for 24 hours, as an encrypted fingerprint; the IP address itself is not stored.
• Demonstration for your municipality (See my town's demo page): the chosen municipality and, if you provide it, your email, to send you the demo link and contact you about it. The number of demonstrations created per Internet connection is counted for 24 hours, as an encrypted fingerprint.
• Quote request or contact message (offer simulator, Contact page): your name, your email and, if you provide them, your job title, phone number, municipality or organisation and your message, in order to reply and send you the quote. The number of submissions per Internet connection is counted for 24 hours, as an encrypted fingerprint.
• Home page assistant: the text of the current conversation, to produce the answer. The conversation is kept in your browser for the duration of your visit, never in our database; only the number of questions per Internet connection is counted for 24 hours, as an encrypted fingerprint. Do not enter any personal data.

Purposes & legal bases

• Measuring visitor numbers and improving the service: basis consent.
• Displaying the information sheet in your language: basis legitimate interest / necessary for the service.
• Calculating a route at your request: basis consent.
• Managing your player account, scores and rankings: basis consent (box ticked when signing up).
• Receiving information from the town or institution: basis consent (optional box, can be withdrawn at any time).
• Checking that the plaque has been scanned before answering it and limiting sign-in attempts: basis legitimate interest (fair play, service security).
• Sending you the link to your demonstration and contacting you about it: basis consent (optional email, provided by you).
• Replying to you and sending you a quote: basis pre-contractual measures taken at your request.
• Answering your questions about the service through the assistant: basis legitimate interest (informing you, at your request).
• Arranging the demonstration you request with you: basis pre-contractual measures taken at your request.

Cookies & trackers

• qra_lang: language preference, 12 months, technical cookie (exempt from consent).
• QRASESSID: secure session, 24 hours at most, essential. When playing without an account, it keeps your points for the duration of your visit.
• qrav_vis: keeps your player account signed in on this device, 12 months from your last visit, set only if you create or open an account. We store only an encrypted fingerprint of it in our database; "Sign out" invalidates it.
• Audience measurement cookies (Matomo): set only after your consent.

Recipients & processors

• Matomo: self-hosted audience measurement (servers in France/EU).
• OpenRouteService (HeiGIT gGmbH, Heidelberg, Germany): walking route calculation: receives your position when you request directions.
• OVH: website hosting (France/EU).
• Anthropic PBC (United States): the language model behind the assistant, which receives the text of the current conversation, without IP address, identifier or cookie.
• The town or institution named next to the optional box, only if you ticked it: receives your email, your username and the date of your consent. It becomes responsible for their use in writing to you; to stop receiving anything, withdraw your consent (§6) and use the unsubscribe link in its messages.

The only transfer outside the European Union is the text of conversations with the assistant, to Anthropic (United States), governed by the European Commission's standard contractual clauses provided for in that provider's terms. Your data is neither sold nor transferred for commercial purposes; the only transmission is the one you expressly accept by ticking the optional box.

Retention periods

• Visit statistics: 13 months maximum.
• Language preference: 12 months.
• Geolocation position: not stored (used in real time only).
• Player account, scores and visit history: until the account is deleted, and at most 3 years after your last activity.
• Sign-in attempts: 24 hours.
• Playing without an account: 24 hours at most, in your browser only.
• Email provided for a demonstration, meeting request, quote request or contact message: 3 years at most after the request.
• Conversation with the assistant: in your browser only, deleted when the tab is closed.
• Consent to receive information from a town: until it is withdrawn or the account is deleted (the date of withdrawal is kept as proof).

Your rights

You can withdraw your consent to receive information from a town at any time, in one click, in "My account", under "My consents".

You can delete your player account yourself at any time from "My account": email, username, points and history are erased immediately and disappear from the rankings.

Under the GDPR, you have the right to access, rectify, erase, restrict, object to and port your data. To exercise these rights, write to contact@qravenue.com. You may also lodge a complaint with the CNIL (cnil.fr).

Manage your consent

You can accept or refuse audience measurement and geolocation via the banner shown on your first visit. To change your choice, clear the site data in your browser: the banner will reappear.