← Back
Caminada Legal notice

Legal notice

This translation is provided for information. The French version prevails. Read the French version

Legal information about the site's publisher, its hosting, data processing and the licences of the sources used.

Last updated: 12 October 2026

Site publisher

The Caminada website, available at caminada.fr, is published by a natural person, Paul Janisson.

Site name
Caminada
Publisher
Paul JANISSON
Legal status
Natural person (personne physique)
Address
31000 TOULOUSE
Contact
contact@caminada.fr
Director of publication
Paul JANISSON

Hosting

The site is hosted by o2switch, a company governed by French law, on a shared hosting plan.

Host
SAS o2switch, RCS Clermont-Ferrand 510 909 807
Address
Chemin des Pardiaux, 63000 Clermont-Ferrand, France
Website
o2switch.fr

The servers are located in France. No data is transferred outside the European Union as part of this hosting.

Personal data and cookies

General principle

Caminada is designed to work without collecting users' personal data. No account is required and no identification is requested to view the site, search for a hike, work out a journey or follow an outing; keeping favourites, a logbook or your answers to the welcome questions from one visit to the next requires an account (see below). No advertising cookies or third-party trackers are set. The processing operations that do exist are all triggered by you: subscribing to the newsletter or to the app release list, reporting a problem on the ground, sending an "A bug, an idea" message, suggesting a trail, giving feedback after an outing, sending a photo, and creating an account. Only the anonymous audience measurement described below works without any action on your part, and you can turn it off. Each is described below, with its purpose, its legal basis, its retention period and the service providers involved.

The data controller is the site's publisher, Paul JANISSON, who can be contacted at contact@caminada.fr. No data is sold, rented or transferred to third parties, and no automated decision producing legal effects is made on the basis of your data.

Data stored on your device

Some features store information in the local storage of your browser or of the app (localStorage, service worker cache), on your device only: the hikes saved as favourites, those kept offline, your logbook (hikes marked "I've done it", with their date, and the feedback you gave: whether you liked the hike, and how hard it felt compared with what was announced), the last three stations chosen in the search, your answers to the welcome questions (usual station, walking time, preferences) and the suggestions you skipped, your choice whether or not to receive the Thursday notification, your display preferences, whether you have seen the news or the newsletter invitation, or closed the Android app suggestion, and a visit counter used to avoid showing these invitations on your first visit (since 14 October 2026, it also tells a first visit from a return for audience measurement). This information is not sent to Caminada's server unless you create an account, cannot be read by any third party, and disappears if you clear the site's data in your browser or uninstall the app. Without an account, your answers to the welcome questions are kept only for the duration of the visit (sessionStorage). This information is strictly necessary for the features you have chosen to use and has no tracking purpose: it falls under the consent exemption provided for in Article 82 of the French Data Protection Act (loi Informatique et Libertés).

This storage also keeps an audience measurement record (see "Audience measurement"): the date of your first visit, the number of days you visited, the steps already counted (return in the second week, the second month, the fourth month), the week and month of the last visit counted, and, for each hike viewed, the date it was first viewed, forgotten after 90 days. This record never leaves your device as it is: only ranges are taken from it ("came back 7 to 29 days after the first visit", "arrived in week 42"), with no identifier. It is deleted 13 months after the first visit, never extended, and immediately if you turn measurement off. It falls under the exemption for audience measurement described below.

In the app, to feed the Caminada home screen widgets, a summary of your favourite hikes and your logbook (names, stations, distances, number of outings) is copied to a storage area of the app on your device, whether or not you add a widget. This summary is not sent to any server. If the Caminada app is installed on your Apple Watch, the summary is sent to that watch, paired with your iPhone, and to it alone. The "Idée de rando" (hike idea) widget and the watch app download every day, from Caminada's server, a list of hikes that is identical for all users, without any identifier.

The logbook can be exported at any time as a readable JSON file, from the "My logbook" view, and imported again on another device: this is also how you exercise your right to data portability for this data.

Account

An account keeps your favourites, your logbook and your answers to the welcome questions from one device to another, and lets you follow the outings of a few friends. It is not needed to view the site, search for a hike, work out a journey or follow an outing; on the site and in the Android app, it is needed to keep favourites, a logbook or your answers. What your device already stored before this rule remains there. The account is reserved for people aged fifteen or over; below that age, the consent of the holder of parental authority is required.

Data processed. Your email address (to send you the sign-in code and identify your account); the username you choose, suggested from your address until you have chosen one; your favourites (hike identifiers); your answers to the welcome questions (usual station, walking time, preferences, suggestions skipped); a randomly generated invitation code; your logbook (hike identifier and name, date, distance, elevation gain, starting station or stop, département, source); your list of friends; outing suggestions sent or received; the dates on which these items were created; a private diary of each outing, readable only by you (free note of up to 280 characters, times on the trail, measured walking time, weather on the day, planned train or bus home); your feedback after an outing (liked: meh, good or great; how hard it felt: easier, as announced or harder), one line per hike; the photos you submit, with the credit name you chose and your permissions (see below). No geographical location and no payment data. Apart from the diary note, the only free text is the message of a suggestion, up to 200 characters.

Purposes and legal bases. Creating the account and synchronising the logbook are based on the performance of the service you request (Article 6(1)(b) GDPR). Sharing your outings with your friends is based on your consent, expressed by voluntarily adding each friend with their code (Article 6(1)(a)); it can be withdrawn by removing the friend or deleting the account. There is no directory, no user search and no public profile: only the people with whom you have exchanged a code see your username and your outings. Your email address is not visible to any other user.

Passwordless sign-in. The site stores no passwords. You sign in with a single-use link sent to your email address, valid for one hour. A session token is then kept in the local storage of your device; it is revoked when you sign out. Signing in sets no cookie.

Processor and location. Account data is hosted by Supabase, Inc. (970 Toa Payoh North, Singapore, with a US entity, Supabase Inc., San Francisco), acting as a processor within the meaning of Article 28 GDPR, in a project dedicated to Caminada located in the European Union (AWS region eu-west-1, Ireland). Data is encrypted in transit and at rest; each account's access to its own rows is enforced at database level (row-level security policies). Supabase is bound by a data processing agreement and, for support access that may take place from a third country, by the European Commission's standard contractual clauses. Sign-in emails are sent through Supabase's email service.

Retention period. Account data is kept for as long as the account exists. You can delete your account at any time, from the "Profile" page, without going through the publisher: deletion immediately and permanently erases your profile, your online logbook, your private diary, your favourites and your answers, your friendships and your suggestions; the host's technical backups are purged within thirty days at most. The logbook kept on your device is not affected. An account with no sign-in for three years will be deleted after a warning by email.

What the account is not. There is no ranking and no public score per person; feedback is only published as an anonymous summary, from five reviews of the same hike (see below); the site sends you no email apart from the sign-in code you requested and, where applicable, the warning before deletion for inactivity. The account is not yet offered in the iOS app; in the Android app, it offers the same options as on the site, including deletion.

Hikers' feedback and photos

Feedback after an outing. After an outing, Caminada asks you, once, whether you liked it and whether the effort matched what was announced. Your answer is kept in your logbook, on your device, and synchronised with your account if you have one. It is used to adapt the hikes suggested to you: this calculation is done on your device; what it infers is shown in "What Caminòt knows about you" and can be forgotten there at any time. Feedback from accounts is only published as a summary, and only for hikes that have received at least five reviews: number of people, number of positive reviews and breakdown of how hard it felt, without username or date. This summary is written into a file on the site at each update: visitors who read it do not contact Supabase. Legal basis: performance of the service you request (Article 6(1)(b) GDPR) for adapting suggestions; your consent (Article 6(1)(a)), expressed by answering, for the public summary.

Submitted photos. For a hike that has no photo, you can submit one, with an account. The photo is resized on your device before sending; this removes the file's metadata, including the GPS position and the device model. It is stored in the storage of Caminada's Supabase project, under the conditions described for the account, then checked by the publisher: nothing is published without this check. An accepted photo is copied to the site's server and shown on the hike page, on the site and in the apps, credited with the name you chose. By sending it, you declare that you took it yourself and that no person can be recognised in it, and you authorise Caminada to display it in this way, free of charge and on a non-exclusive basis, for as long as the hike is published. It is shared on Caminada's Instagram account only if you ticked the box provided for this. A photo still awaiting review is deleted with your account; a published photo remains displayed with its credit name, unless you request its removal at contact@caminada.fr, which is handled within one month. Legal basis: your consent (Article 6(1)(a) GDPR).

Audience measurement

The site and the apps use Matomo, free audience measurement software installed on Caminada's server (stats.caminada.fr): visit data is not sent to any third party and does not leave the site's hosting. Matomo is configured there in CNIL compliance mode: no cookie is set, no user identifier is used, IP addresses have their last two bytes removed before anything is recorded, and cross-site tracking, heatmaps and session recording are disabled. The page address is recorded without the account sign-in parameters or any unknown parameter.

Counted without identification:

Loyalty, performance and errors are recorded in a separate Matomo space, so as not to distort the reading of visits. Nothing recorded contains your email address, your username, your location, the content of your logbook or journal, or any text you typed, apart from the search rule above. Raw data is kept for 25 months at most; only totals remain after that.

Shared statistics. Caminada may pass on to local authorities, hiking data producers or institutional partners aggregated and anonymous statistics drawn from this measurement, by département, by month or by hike: number of hike page views, timetables worked out, tracks downloaded, outings started and logged. Any figure below 5 is hidden. No visit data, no IP address and no device record is passed on.

This configuration follows the criteria of the CNIL recommendation on audience measurement tools (4 July 2025, in French), which exempt such measurement from prior consent: the site therefore shows no banner.

You can nevertheless object to this measurement at any time, with the button below or, in the app, from Profile, "Audience measurement" line. Your objection is remembered on your device, in local storage, for that sole purpose: no measurement is sent from this browser or app any more, and the measurement record is deleted. If you objected with the old form, before 14 October 2026, object again here: the old objection relied on a cookie from the measurement server that several browsers block.

Newsletter subscription

If you voluntarily subscribe to the newsletter through the dedicated form, your email address is collected for that sole purpose. The legal basis for the processing is your consent (Article 6(1)(a) GDPR). This address is not transferred, sold or used for any other purpose. You can unsubscribe at any time using the link in each email, or by contacting the publisher.

Newsletters are sent and subscriptions managed by Brevo (Sendinblue SAS), a provider established in the European Union that hosts data within the EU, acting as a processor within the meaning of Article 28 GDPR. Your email address is kept until you unsubscribe, after which it is deleted.

App release list

The The Caminada app is coming page offers a list separate from the newsletter: a welcome email, news from the testing phase, then a last email on the day the apps are released. Signing up sends your email address, your first name if you give it and, if the link you followed has one, its campaign parameter (mtm_source, utm_source, mtm_campaign or utm_campaign). The site of the previous page is not read. The legal basis is your consent (Article 6(1)(a) GDPR), given by ticking a box that is not pre-ticked and then confirmed through a link sent to your address. This data is managed by Brevo under the same conditions as the newsletter and kept until you unsubscribe.

Reports from the trail

Some hike pages — those for routes without a managing body: hikes tested by Caminada, routes from OpenStreetMap, manual integrations — offer a form for reporting a problem encountered on the route. The others link to the Sentinelles des sports de nature platform, which the relevant managers consult, and no data is then sent to Caminada.

The form sends the reason chosen, your details and the identifier of the hike concerned. Entering an email address is optional: if given, it is used only to reply to you about this report, is never added to the newsletter mailing list, and is deleted once the report has been dealt with. The legal basis for the processing is your consent (Article 6(1)(a) GDPR). No geographical location, no browsing data and no device identifier is collected.

These messages are delivered by Brevo (Sendinblue SAS), a processor established in the European Union, under the same conditions as the newsletter. The content of a report may be passed on, without your email address, to the managing body or to the OpenStreetMap community when the correction is their responsibility.

Trail suggestions

The "Profile" page offers a form to suggest a hike that starts from a station or a bus stop. It sends the name of the trail, its start, its shape and its duration if you give them, your description, a link to a track if there is one, and, optionally, a first name or username and an email address. This message is delivered by Brevo under the same conditions as reports. Nothing is published automatically: the publisher checks or tests the trail; if the trail is kept, it is published with the mention "Suggested by a hiker" and, if you gave it, your first name or username. The email address is used only to reply to you about this suggestion and is deleted once it has been dealt with. Legal basis: your consent (Article 6(1)(a) GDPR), expressed by the form's tick box.

"A bug, an idea" messages

The "Profile" page offers a form to report a malfunction or suggest an improvement. It sends your message, its type (bug, idea or other), the Caminada version, the device type (website, Android or iPhone app), the display language and, optionally, an email address. This message is delivered by Brevo under the same conditions as reports. The email address is used only to reply to you about this message, is never added to the newsletter mailing list, and is deleted once the message has been dealt with. No location or browsing data is sent. Legal basis: your consent (Article 6(1)(a) GDPR), expressed by sending the form.

Device location

The "Near me" feature asks the browser, or the app, for permission to access the device's location. This location is used only on the device, to find the nearest station or stop: it is never sent to Caminada's server or to a third party, and it is not stored. The "I'm off" feature also uses the location, continuously during the outing, to show where you are on the route and recalculate the return time. The location then stays on the device and is not stored. Refusing permission does not prevent you from using the site by choosing a station manually.

The Caminada apps for Android and iOS are wrappers around the site: they add no data collection, access neither the contacts nor the device's advertising identifier, read a photo only if you choose it yourself to submit it, and contain no third-party measurement or advertising SDK. Content and audience measurement are identical to the site, with two differences: the account is not yet offered in the iOS app, and the window inviting you to the newsletter does not appear in the apps (you can still subscribe from the About page). The apps also offer an optional weekly notification, "Ta rando de samedi" (your Saturday hike), on Thursdays at 18:00: off by default, it is switched on and off in Profile, and it is scheduled on the device, with no server and no data sent.

Security

The site is served exclusively over HTTPS. Account data is isolated per user at database level, and the functions that go beyond this isolation (adding a friend by code, deleting the account, the publisher's review of photos, calculating the anonymous feedback summary) are the only ones with extended rights, limited to that action. In the event of a data breach likely to result in a risk to your rights, the publisher notifies the CNIL within 72 hours and, if the risk is high, the people concerned.

Your rights

In accordance with Regulation (EU) 2016/679 (GDPR) and French Law No. 78-17 of 6 January 1978 as amended, you have the right of access, rectification, erasure, restriction, portability and objection regarding your personal data, as well as the right to withdraw consent at any time and to set out instructions on what happens to your data after your death. For the account, erasure and portability are exercised directly in "Profile" (account deletion, logbook export). For everything else, or if you prefer, write to contact@caminada.fr; you will receive a reply within one month, which may be extended by two months for complex requests. No proof of identity is requested when the request comes from the email address associated with the account or the subscription.

If the disagreement persists, you can lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL, the French data protection authority), 3 place de Fontenoy, 75007 Paris — cnil.fr.

Intellectual property

The Caminada name, the logo, the interface, the graphic design, the editorial texts and the application code specific to the site are the exclusive property of the publisher and are protected by the French Intellectual Property Code. Any reproduction, representation or use, in whole or in part, without prior written permission, is prohibited.

The geographical and descriptive data shown on the site (stations, hikes, tracks, isochrones, photographs), on the other hand, comes from public sources under open licences. It remains subject to its original licences and keeps its respective authorship.

Data sources and licences

Caminada aggregates several public sources. Each keeps its original licence, listed below source by source rather than under a single licence:

Downloadable GPX files

The tracks offered for download include in their metadata the name of the original producer, the year, the applicable licence and a link to the source page. This information must be kept if the files are redistributed. For tracks derived from OpenStreetMap, the share-alike requirement of the ODbL applies to any derived database published from these files.

Original OpenStreetMap contributions remain the property of their contributors. Any reuse of the data shown on Caminada must credit the sources and respect their respective licences, in particular the share-alike requirement of the ODbL for derived databases, and the usage restrictions specific to each Geotrek and PDIPR producer.

Liability

Caminada is an information and orientation tool. The data presented (trail descriptions, estimated times, elevation gains, tracks, waymarking) comes from external sources and may contain errors, inaccuracies or outdated information. The publisher cannot be held liable for any direct or indirect consequences of its use.

Preparing a hike remains the hiker's responsibility. Every outing should rely on a 1:25,000 IGN map, an up-to-date weather check, equipment suited to the difficulty of the route and to the season, and the current official pages of the managing bodies (park, département, tourist office).

The publisher endeavours to keep the site available and up to date but guarantees neither continuous availability nor the absence of errors. Technical interruptions due to the host, to third-party APIs (IGN, Geotrek) or to maintenance do not give rise to any right to compensation.

Hikes tested by Caminada

Some routes, marked "Tested by Caminada", do not come from an official managing body: they were walked and described directly by the site's publisher, in a personal and voluntary capacity. Unlike Geotrek, PDIPR or OpenStreetMap data, the publisher is here the author of the content and not merely a relay of public data.

This content reflects a one-off observation, on the date shown on the hike page: the state of the waymarking, the condition of the ground, the presence of water or the access conditions may have changed since. The difficulty and time shown remain personal estimates, not an official measurement or the opinion of an expert in mountain leadership — the publisher is not a qualified mountain leader and offers no guiding services. The same preparation precautions apply as for any other route on the site, with extra care in checking the conditions on the day.

Resources loaded from third-party servers

Some hike photographs are displayed directly from the servers of the data producers (Geotrek instances of the partner parks and départements). Your browser then contacts these servers, which therefore receive your IP address, your browser details and the referring page — as with any image displayed from another site. The publisher has no access to these logs and sets no tracker this way. The base maps (IGN Géoplateforme and, if you choose that base map, OpenStreetMap tiles) and the weather (Open-Meteo) are loaded on the same principle, on demand.

None of these requests sends a session identifier, a cookie or any data you have entered on the site.

External links and partnerships

The site contains links to third-party sites (SNCF Connect, booking platforms, partner sites, data sources). The publisher has no control over these sites and accepts no responsibility for their content, their data practices or their availability.

Links to SNCF Connect are direct links: the publisher receives no commission on bookings.

Until 5 October 2026, the site offered voluntary support through the third-party platform Ko-fi. This support has been suspended since that date: the site no longer asks for contributions this way. Contributions made before then were voluntary, with no consideration in return and in an amount chosen by the contributor. They constituted income of the publisher, declared as part of the publisher's micro-enterprise activity: they were not donations giving entitlement to a tax reduction within the meaning of Articles 200 or 238 bis of the French General Tax Code (CGI). The collection and processing of payments were the responsibility of Ko-fi and its payment providers, under their own terms and privacy policy; the publisher has neither processed nor kept any bank details of contributors.

Applicable law and disputes

This legal notice is governed by French law. In the event of a dispute, and after an attempt to reach an amicable settlement by contacting the publisher directly, the French courts shall have sole jurisdiction.

In accordance with Article L. 612-1 of the French Consumer Code, in the event of a dispute relating to any commercial service, consumers may use a consumer mediator free of charge with a view to an amicable settlement. The competent mediator will be specified when any commercial relationship is entered into.

Technical credits

Site developed in HTML, CSS and vanilla JavaScript. Maps are provided by Leaflet, self-hosted on the Caminada server (no request to a third-party CDN). The Fraunces and Geist fonts are self-hosted for the same reason. Audience measurement by Matomo, self-hosted on stats.caminada.fr. Optional account and synchronised logbook on Supabase (dedicated project, European Union), with no third-party library in the browser. Data pipeline in Python with Shapely and the Overpass API for OpenStreetMap.

For any question about this legal notice, write to contact@caminada.fr.