Privacy policy

Data controller

The data controller is the publisher of the service, identified in our legal notice. For any question about your data, write to us at contact@brikabroke.app.

Data we process

Account data: email address, password (stored encrypted), pseudonym and, if you provide them, first and last name and a profile photo. If you sign in with Google, we receive the basic information from your Google profile.

Content and usage: your listings, lists, photos, offers and messages; an approximate location area tied to your listings; technical data (connection logs, device type) and audience measurement.

Purposes and legal bases

We process your data to: provide and operate the service (performance of the contract); ensure security and prevent fraud (legitimate interest); send you notifications and communications (consent or legitimate interest, as applicable); and meet our legal obligations.

Privacy by design

Your real name is never shown publicly: you are identified by a pseudonym. Your exact address is disclosed only to a buyer, after an offer is accepted; public pages show only an approximate, deliberately rounded area.

Payments and processors

Premium subscriptions are handled by Stripe, acting as a processor; BrikaBroke neither collects nor stores your card details.

Your data may also be processed by our other technical providers: our private hosting infrastructure (located in France and Canada), Google (authentication, if you use it) and our email and notification delivery service. Any transfers outside the European Union (Canada) are covered by the European Commission's adequacy decision. We never sell your data.

Audience measurement and cookies

We measure site audience with Matomo, open-source software that we host ourselves, on our own infrastructure. No browsing data is sent to a third-party analytics service or to any ad network: measurements are sent to our own domain, then stored on our servers.

Your IP address is truncated before anything is recorded, which prevents identifying you or pinpointing your location. Audience measurement stores no cookie on your device. We build no advertising profile, do not follow your browsing on other sites, and neither sell nor share these statistics.

If your browser sends a "Do Not Track" or "Global Privacy Control" signal, it is passed on to Matomo and honoured.

This is limited to producing anonymous usage statistics. As such it falls under the consent exemption the French data protection authority (CNIL) grants for audience measurement, and therefore needs no banner. The only cookies we set are strictly necessary to the service, for example to keep your session.

Retention period

Your data is kept for the lifetime of your account, then deleted or anonymized within a reasonable period after it is closed, subject to legal retention obligations.

Your rights

You have the right to access, rectify, erase, restrict, object to and port your data. You can exercise these rights from your profile or by writing to us. You may also lodge a complaint with your data-protection authority (in France, the CNIL, www.cnil.fr).