Privacy policy
Last updated:
Who is responsible for your data?
The data controller is Paul Govaere, publisher of ConsoTrack.
For any question about your data, write to govaere.paul@gmail.com.
What data do we collect?
- Your account: your email address and first name (or display name). If you sign in with Google, we receive your Google account identifier, your name and your email address. Your password is handled by Firebase Authentication: ConsoTrack never has access to it in plain text.
- Your preferences: language, currency, theme, notification preference, and the goal chosen at sign-up (cut down, quit or just track).
- What you consume: for each entry, the substance, quantity, unit, date and time, estimated cost and, for alcohol, the strength.
- Your use of the features: your favorites, goals, challenges and progress (XP, quests, streaks, records).
Sensitive data
What you consume (alcohol, tobacco, other substances) can reveal information about your health. Under the GDPR, this is potentially health data, which benefits from stronger protection.
Why do we use this data?
Only to run ConsoTrack: record what you consume, compute your stats, follow your goals, suggest challenges and prepare your weekly recap.
ConsoTrack shows no ads and uses no analytics tools. Your data is never sold, rented or shared for commercial purposes.
Where is your data stored?
ConsoTrack relies on Firebase, a Google service:
- Firebase Authentication for your account;
- Cloud Firestore for your data, stored in the European Union (europe-west9 region, Paris);
- Firebase Hosting to host this site and the web app.
As Google LLC is a US company, some data (in particular your account data) may be processed outside the European Union. These transfers are covered by the EU-U.S. Data Privacy Framework, which Google complies with, and by the European Commission’s Standard Contractual Clauses.
On your device, the app keeps a local copy of your data so it works offline, as well as your session to keep you signed in.
Who can access your data?
In the app, the database security rules only allow the account holder to access the data.
As the administrator of the service, the publisher can technically access the database. This only happens to answer one of your requests (support, exercising your rights), fix a technical incident or comply with a legal obligation.
How long do we keep it?
Your data is kept as long as your account exists. When you delete your account, your profile, entries, favorites, goals, challenges, progress and sign-in account are deleted.
No database backups are kept: once deleted, your data cannot be restored.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, and to withdraw your consent at any time.
- Rectify: edit your profile and preferences in the app settings.
- Get your data: export your consumption history as CSV from the app settings. To get all your data, write to govaere.paul@gmail.com.
- Erase everything: delete your account from the app settings (see Delete my account).
- For anything else, write to govaere.paul@gmail.com. You will get an answer within one month at the latest.
You can also lodge a complaint with your data protection authority, such as the CNIL in France.
Cookies and trackers
This site sets no cookies and uses no trackers.
The web app uses your browser’s local storage only to keep you signed in and to work offline. This storage is strictly necessary for the service.
Minimum age
ConsoTrack is only intended for people aged 18 or over.
Changes
This policy may change. The date of the last update is shown at the top of the page.