Privacy Policy
Last updated: 24/09/2026
1. Data controller
The data controller is Edouard LEVAST, sole trader (EI), 4 rue Saint-Exupéry, 35480 Guipry-Messac, France, who operates the website www.trailo.fr under the trade name Trailo. For any question about your data: contact form or [email protected]. → Contact form
2. Data collected and how it is used
| Situation | Data | Why | Legal basis | Retention period |
|---|---|---|---|---|
| Creating a map | Imported GPX file or Strava route (coordinates, altitude, date), generated 3D model | Generate the preview, then make the map | Performance of your request | 30 days, then automatic deletion |
| Connecting to Strava | Athlete ID, access tokens, list of your recent activities | Let you choose an activity | Your consent | Length of your session; nothing is stored in our database |
| Order | Name, email, phone, delivery address or pick-up point, country, language, order contents and amount | Process, ship and track the order; invoicing | Performance of the contract; legal obligation | 10 years for accounting records; 3 years after the last purchase for the rest |
| Order-related emails | Email, first name, tracking number | Inform you about production and shipping, then ask for your review after delivery | Performance of the contract; legitimate interest for the review request | Same as the order |
| Contact form | Name, email, order number, message | Reply to your request | Legitimate interest | 3 years after the last exchange |
| Browsing | IP address, country, pages viewed, cookies | Running and securing the website; audience measurement and advertising with your consent | Legitimate interest; consent for non-essential cookies | 13 months maximum for cookies |
We never sell your data. Your bank card details are entered directly with Stripe: Trailo never has access to them.
3. Strava data
Connecting to Strava uses the secure OAuth protocol and only requests read-only permissions (read and activity:read_all). Trailo cannot edit, comment on or delete your activities. Access tokens stay in your session cookie and disappear when the session ends. Only the activity you choose is downloaded, to generate your map. You can revoke access at any time in your Strava account settings.
4. Recipients and processors
Your data is processed by Trailo and, only to the extent needed for their task, by the following providers:
| Provider | Role | Location |
|---|---|---|
| Trailo (publisher's personal server) | Hosting of the website and database | France |
| Cloudflare | Website security and delivery | European Union / United States |
| Stripe | Payment and invoices | European Union / United States |
| Brevo | Sending emails (orders, reviews, contact form) | France |
| Google (Gmail) | Receiving contact messages | European Union / United States |
| Mondial Relay, La Poste / Colissimo | Parcel delivery and tracking | France |
| Strava | Connecting and importing activities, if you use it | United States |
| Google (Analytics, Ads), Meta, TikTok, Microsoft (Clarity) | Audience measurement and advertising, only with your consent | European Union / United States |
| Cookiebot | Managing your cookie consent | European Union |
Transfers outside the European Union are covered by the EU–US Data Privacy Framework or by the European Commission's standard contractual clauses.
If you have accepted audience measurement or advertising cookies, a purchase signal is sent to Google, Meta and TikTok to measure the effectiveness of our ads. It contains the order amount and, for Meta and TikTok, your email and, depending on the service, your phone number in encrypted (hashed) form, as well as your IP address, city, postcode and country. Without your consent, nothing is sent.
5. Cookies
The website uses three categories of cookies:
- Necessary cookies (session, cart, language, delivery country): they do not require consent.
- Audience measurement cookies (Google Analytics, Microsoft Clarity).
- Advertising cookies (Google Ads, Meta, TikTok).
The last two categories are only set with your consent, collected through the Cookiebot banner. You can change your choices at any time using the website's cookie settings button.
6. Security
Exchanges with the website are encrypted (HTTPS). Access to the administration area is password-protected and reserved for Trailo.
7. Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, and to withdraw your consent at any time. To exercise these rights, write to us via the contact form or at [email protected]: we reply within one month.
You can also lodge a complaint with the CNIL (French data protection authority). → www.cnil.fr
8. Changes
This policy may be updated. The date shown at the top of the page corresponds to the latest version.