Skip to content

Privacy policy

The data WhereIsMyBeer collects, why, who it is shared with and how long it is kept.

Updated on October 14, 2026

Controller

WhereIsMyBeer is a personal project of Maxime Defrancq, the data controller. For any question or request: contact@whereismybeer.com.

Data collected

  • Your account: email address, username and password (stored hashed, never in clear).
  • Your contributions: reviews, ratings, photos, bars, beers and breweries added or edited. They are public and shown with your username. The details of your edits of bars (values before and after) are kept so that the administrators can revert them. Your reports (reason and details) are only visible to the administrators.
  • Your favorites and the history of your actions on the site (additions, edits, reviews), shown on your profile.
  • Your position, only if you use "Around me" and allow it in your browser. It is used for the search and is not stored.
  • Photos are re-encoded when sent: their metadata, including the GPS position where they were taken, is removed.
  • Technical data: IP address and requests, used to limit abuse (number of submissions per hour) and in the error logs.

Use

  • Providing the service: your account, your contributions and your favorites (performance of the terms of use).
  • Sending the emails the account needs: email address confirmation and password reset. No newsletter and no advertising.
  • Protecting the site against bots and abuse: ALTCHA anti-bot check at registration, with no cookie and no third party, and rate limits (legitimate interest).

Your data is neither sold nor used for advertising. The site uses no audience measurement tool.

Service providers

The following providers process data to run the site:

  • OVHcloud (France): hosting of the site and the database, sending of the emails.
  • Cloudinary (United States): storage and display of the photos.
  • Google Maps Platform (United States): place search when you add a bar. Our server sends the text typed to Google, without your IP address.
  • OpenStreetMap (United Kingdom): map tiles, downloaded directly by your browser with your IP address, and name, address and position of the bars. To find them, our server sends the name and position of the chosen place to Nominatim (OpenStreetMap).
  • Unsplash and Ko-fi: photos of the home page and image of the donation button, loaded directly by your browser.

Transfers outside the European Union rely on the safeguards of the GDPR (adequacy decision or standard contractual clauses).

Cookies

The site only uses cookies it needs to work: the session cookie, which keeps you logged in, and a cookie protecting the forms. No audience measurement or advertising cookie, so no consent is asked.

Retention

  • Account: until it is deleted. After deletion, your contributions stay on the site under "Deleted user", without any personal data.
  • Links sent by email: 24 hours for the email confirmation, 1 hour for the password reset.
  • Anti-abuse counters: one hour at most.
  • Technical logs: 30 days for the browser security reports; the logs of the host according to its own legal obligations.

Your rights

You have the right to access, rectify, erase, port and object to your data:

For any other request, write to contact@whereismybeer.com. You can also lodge a complaint with the CNIL (cnil.fr).

Security

The site is only served over HTTPS, passwords are hashed and the admin requires two-factor authentication.