Legal Notice & Privacy Policy

1. Website Publisher

The DeepPVMapper website, available at https://deeppvmapper.fr (including its game section, https://deeppvmapper.fr/game/), is operated by:

Gabriel Kasmi, an individual (the website is operated in a personal capacity, outside of any professional activity).
Contact email address: gabriel.kasmi@deeppvmapper.fr
Publication Director: Gabriel Kasmi

2. Hosting

Three separate service providers are involved:

  • OVH: registration and management of the deeppvmapper.fr domain name (DNS). Address: 2 rue Kellermann, 59100 Roubaix, France.
  • GitHub Pages (GitHub, Inc.): hosting of the website's static files (HTML/CSS/JS), served through their content delivery network.
  • Supabase: database and authentication (player accounts, verifications, annotations, reports). Server located in Frankfurt, Germany (European Union).

The website itself (pages, images) does not contain any personal data: only data transmitted through Supabase constitutes personal data, as described in §4.

3. Data Controller

The data controller responsible for the processing of personal data collected through DeepPVMapper is:

Gabriel Kasmi
Contact: gabriel.kasmi@deeppvmapper.fr

This policy explains what data may be collected when you use the website and the PV Check game, why it is used, and what your rights are.

4. Data Collected

Depending on how you use the website, the following data may be collected:

On the game (PV Check)

  • Username: required to play. It is used to identify the player and display their ranking and contributions.
  • Email address and password, only if you choose to create an account using an email address (otherwise, you play using an anonymous account linked only to your username and device). The password is securely encrypted and stored by our authentication provider (Supabase) — we never have access to it in plain text.
  • Game data: your verification decisions (confirm / reject / unsure) for each detection, an optional comment when you mark a detection as ambiguous, and the date of each action. This data is used to calculate your number of verifications, ranking, and consecutive-day streak.

On the map and contribution features

  • Reports and annotations: when you report an error or add/modify an annotation on the map, the content of your contribution (geometry, comment) is recorded. These contributions are anonymous — no account is required.

What we do not collect ourselves

We do not store IP addresses in our own databases — none of our tables contain this field. However, as with any website, your IP address necessarily passes through our technical service providers (OVH, GitHub Pages, Supabase) as part of the normal operation of the internet, and may temporarily appear in their technical logs (security, anti-abuse measures) — without us accessing or using this information ourselves.

A username may constitute personal data when it allows a person to be identified directly or indirectly. We do not request personal data that is not necessary for the operation of the service.

5. Purposes of Processing

The collected data may be used to:

  • create and manage player accounts;
  • record progress, verifications, and results;
  • establish rankings, streaks, and game statistics;
  • process annotations and reports submitted on the map;
  • operate and improve the website and game;
  • ensure service security and prevent abuse;
  • contact players when necessary for the operation of the service;
  • respond to requests addressed to the data controller.

The data is not used for commercial marketing purposes.

7. Mandatory or Optional Data

A username is required to play PV Check.

An email address and password are optional: they are only required if you wish to create a permanent account (for example, to recover your progress on another device). Without them, you can play using a fully functional anonymous account.

No data is required to contribute annotations or reports to the map.

8. Data Recipients

Data is accessible only to the people and service providers who need it to operate the service:

  • the project operator;
  • Supabase, our database and authentication provider, which hosts all accounts, verifications, and annotations on a server located in Frankfurt, Germany;
  • GitHub Pages and OVH, for hosting the website files and managing the domain name.

Personal data is not sold to third parties.

Your personal data (account, verifications, annotations) remains hosted within the European Union — no transfer outside the EU takes place for this data.

9. Data Retention

Personal data is retained only for as long as necessary for the purposes for which it is processed. As an indication:

  • Player account and username: for as long as the account exists. Deleting the account (available directly from the game menu) immediately deletes the account and associated username.
  • Email address and password: for as long as the account exists, and deleted along with it.
  • Previously recorded verifications: retained after account deletion, but separated from your identity (the link to the account is removed and the data becomes anonymous) — they continue to be included in the project's overall statistics.
  • Annotations and reports: retained indefinitely insofar as they are anonymous from the outset and necessary for the long-term improvement of the map.

Certain data may be retained for longer where required by law.

10. Rankings and Public Display

If you play PV Check, your username and the number of verifications you have completed may be visible to other game users through the rankings (day / week / all-time).

We recommend choosing a username that does not directly identify you if you wish to remain anonymous to other players — at sign-up, you can also let the app assign you a random pseudo instead of typing your own.

Your email address is never made public.

11. Cookies and Technical Data

The website uses your browser's local storage (localStorage) — rather than cookies in the strict sense — for purposes that are strictly necessary for the operation of the service: keeping your game session active, remembering whether you have already viewed the tutorial, and preventing certain internal game notifications from being displayed multiple times. This information remains on your device and is not transmitted to third parties for advertising purposes.

No audience measurement or advertising tracking tools are currently used. If this changes, this section will be updated and your consent will be obtained where required.

Technical data necessary for the security and operation of the service (access logs, anti-abuse protection) may include your IP address and browser-related information — see §4 for details of what we store ourselves.

12. Security

Appropriate technical and organisational measures are implemented to protect personal data against unauthorised access, loss, alteration, or disclosure — including password encryption and strict access controls (Row Level Security) preventing users from accessing another user's data.

13. Your Rights

In accordance with the GDPR and the French Data Protection Act (Loi Informatique et Libertés), you have, in particular:

  • the right to access your data;
  • the right to rectify inaccurate data (your username can be changed directly from the game menu);
  • the right to have your data erased (account deletion is available directly from the game menu);
  • the right to restrict processing under the conditions provided by applicable regulations;
  • the right to object to certain processing activities;
  • the right to data portability where applicable;
  • the right to withdraw your consent at any time when processing is based on consent.

To exercise your rights, you can contact: gabriel.kasmi@deeppvmapper.fr

Where necessary, your request must allow us to verify your identity in order to prevent another person from accessing your data.

14. Complaints to the CNIL

If, after contacting us, you believe that your rights regarding your personal data have not been respected, you may lodge a complaint with the French data protection authority, the Commission nationale de l'informatique et des libertés (CNIL): https://www.cnil.fr/fr/plaintes

15. Acceptable Use of the Registry and the API

The OpenPVMapper registry and the public API are provided to support research, planning, open mapping and other lawful uses. Users are asked not to use the API or the data in any way that is unlawful or harmful, in particular:

  • to identify, locate, profile or target individuals or households, including by combining the data with other sources for that purpose;
  • for fraud, scams, harassment or intimidation;
  • in violation of applicable law, including data protection and privacy law.

Users are also asked not to degrade the shared public API, for example through abusive request volumes. For large-scale processing, the versioned bulk releases should be used.

The maintainers may take appropriate measures against misuse, including changing access conditions and reporting it to the relevant platforms or authorities. This section concerns the use of the API and of the project’s services, and does not restrict the rights granted by the CC BY 4.0 license on the data. Removal of a detection can be requested at gabriel.kasmi@deeppvmapper.fr.

16. Changes to this Policy

This privacy policy may be updated to reflect changes to the website, the game, its features, or applicable regulations. The version currently published on this page is the version in force.

Contact: gabriel.kasmi@deeppvmapper.fr