Privacy

This page describes what the site actually does in its current state. It must be updated at the same time as any new analytics tool or any new form.

What the site collects today

No account, no comments, no advertising tracker. One analytics tool is active, described under “Analytics” below.

Site search runs entirely in your browser: your query is never sent to a server.

Contact form

Your name, email address and message are relayed by email to the editorial desk and are not stored anywhere. The legal basis is your consent, given by ticking the box before sending. We use the address only to reply to you.

Analytics

The site uses PostHog (hosted in the European Union) to understand how it is used and where the trip planner loses its visitors: page views, where visits come from, planner steps (questionnaire, preview, payment completed or abandoned), heatmaps and session recording. Session recording replays movements and clicks on the page; the content of input fields is masked and never recorded.

• No cookie: the visit is linked by a random identifier, kept in the browser tab for the duration of the visit (browser session storage) and erased when it closes. No cookie is set.
• Through our own domain: the script and the data go through our own server (/ingest), which forwards them to PostHog. Your browser contacts no third-party analytics domain. PostHog is set not to keep your IP address.
• What is sent: page views, device type, language, where the visit came from (search engine, link, email campaign) and, for the planner, the shape of the stay requested (length, type of travellers, season). Never your name or email.
• Purpose: audience measurement and improving the site and the planner. No resale, no advertising targeting, no tracking across sites.
• Opting out: measurement honours your browser's “Do Not Track” signal: if it is on, nothing is collected. The site stays fully functional.

Third-party services called by the pages

• Fonts: self-hosted. No request to Google Fonts.
• Maps: the lake map is a local vector drawing. No third-party tiles, no cookie. The “get directions” links open Google Maps in a new tab, and only when you choose to click them.
• Home page video: served from our own domain, not from YouTube or Vimeo.
• Weather: the temperature shown at the top of the home page comes from a request your browser makes to Open-Meteo, a European service with no account and no cookie. That request sends the latitude and longitude of Annecy — never your own position — and your IP address, as any web request does. No identifier, no tracker. If the call fails, the page simply shows the date without a temperature.

Trip-planning assistant

The Plan your trip page uses two third-party services to build your itinerary: a language model (DeepSeek) for reasoning and a web-search engine (Tavily) to find real places. For a free preview, no data is stored on our servers: everything is sent, processed, then discarded. For a paid itinerary, a limited retention applies — see “Trip-planner payment” below.

• Legal basis: your voluntary decision to use this page.
• Processor — generation: DeepSeek. Your travel profile and conversation history are sent to its servers (outside the EU) to generate the itinerary.
• Processor — web search: Tavily. Each search query from the planner is routed through Tavily's servers (United States); only the text query is sent, no identity data.
• Data involved: the text you type in the chat and your answers to the four starting questions (who's travelling, duration, style, lodging area).

Trip-planner payment

Previewing the itinerary is free. Unlocking the full itinerary (€5) goes through Stripe, which hosts the payment page itself: it never displays inside an iframe on annecyvibes.com. The site therefore sets no Stripe cookie, and this does not require a new cookie-consent banner.

• Processor: Stripe, which handles the payment and collects the email address used for the receipt; a transfer of this data outside the European Union is possible.
• Retention: the unlocked itinerary and its associated email are kept for up to 30 days in a Cloudflare database (KV), to allow resuming it from the link sent by email, then automatically deleted.
• Legal basis: performance of the paid service you ordered (contract).

Email after the free preview

After the preview, you can ask to receive your day 1 by email. It is optional: the preview can be read without entering anything.

• What is sent: three emails at most, all about this trip — your day, a reminder the next day, and the day before you leave the forecast and the events on your dates. Every email carries a one-click unsubscribe link.
• What is kept: the address, the language, the questionnaire answers and the displayed day 1, for up to 120 days in a Cloudflare database (KV), then automatically deleted. The forecast comes from Open-Meteo, queried without personal data.
• Processor: Resend, for sending the emails.
• Legal basis: your request (consent), withdrawable at any time via the unsubscribe link or by writing to us.

Your rights

You have the right to access, correct, erase and object to the processing of your data. To exercise it, write to the contact address given in the legal notice. You may also lodge a complaint with the French data protection authority (CNIL).