Privacy Policy
Service concerned: Proof's website, served at proofplaces.com and its subdomains, including share.proofplaces.com. The mobile app, not yet distributed, will have its own policy. Last updated: August 27, 2026. Courtesy translation: the French version is the only binding one.
In short
To leave the waiting list: reply to the confirmation email, or write to privacy@proofplaces.com. Aged 15 to 17? These pages are written to be read without a translator; if anything stays unclear, ask an adult you trust, and see our child safety page.
This site asks nothing of you, unless you decide otherwise. No account, no social buttons, no cookie, no audience measurement, no advertising. One single thing is offered, and only if you fill it in: the waiting-list form, which asks for an email address only and serves only to tell you when the app launches.
No page of this site loads anything from any server but ours. No remote font, no map, no video, no tracking pixel: your browser talks to no one else. That is why you see no consent banner: there is nothing to consent to.
1. Data controller
Proof., a French SAS, 47 rue Vivienne, 75002 Paris, France, registered in Paris under number 105 827 075, represented by Baptiste Quérat-Hément, President. Personal-data contact: privacy@proofplaces.com. No data protection officer has been appointed to date; requests are handled by the legal representative.
2. What the site does not do
It sets no cookie of any kind, uses no audience measurement, shows no advertising, embeds no third-party content on any of its pages, and does not sell, rent or exchange any data.
3. What is technically recorded
Our host's logs. Like any site, proofplaces.com is served by a host, Google Ireland Limited via Firebase Hosting, which technically logs incoming requests: IP address, date and time, page requested, browser type. These logs keep the site running and secure. We do not consult them to analyse visits. Legal basis: our legitimate interest in operating and securing the service (art. 6.1.f GDPR). Retention: our host deletes these logs after a few months, a commitment stated in its public documentation; we keep no copy.
Pages opened from a shared link. Addresses starting with /plan/, /spot/, /u/ and /c/ display content a person chose to share from the app. They set no cookie and load no external resource.
4. The waiting list
The "Join the list" form serves one purpose: writing to you once, the day the app launches. What is recorded: your email address as you type it, the date, the place on the site you signed up from, and a hash of your IP address, never the address itself, to cap sign-ups per connection and stop robots enrolling third parties. Nothing else: no name, no phone number, no cookie, no profile.
Purposes and legal bases: telling you about the launch, on your consent (art. 6.1.a GDPR), given by sending the form; and blocking abusive or automated sign-ups, on our legitimate interest in protecting the form (art. 6.1.f). Retention: the address, until the launch email and at most twenty-four months after sign-up; the anti-abuse counters, which hold only an IP hash and dates, never an email address, roll over a twenty-four-hour sliding window and are deleted at the latest when the waiting list closes.
Withdrawing. At any time and without justification: reply to the confirmation email, or write to privacy@proofplaces.com. Your address is then deleted, not moved to an exclusion list.
5. If you write to us
If you email support@proofplaces.com, legal@proofplaces.com or privacy@proofplaces.com, we process your email address and your message's content for the sole purpose of answering. Legal basis: our legitimate interest in answering the people who reach out. These emails are received and stored by our email provider, Google Ireland Limited (Google Workspace), under its data processing agreement, which embeds the European Commission's standard contractual clauses. They are kept for the time needed to handle your request, then at most five years where it could ground a legal claim, otherwise deleted.
6. Recipients
Google Ireland Limited (Firebase Hosting): site hosting and technical logs, European Union. Google Ireland Limited (Cloud Firestore): storage of waiting-list sign-ups, European Union, multi-region eur3. Google Ireland Limited (Google Workspace): receipt and storage of emails sent to our contact addresses, European Union and, for operations, third countries under standard contractual clauses. Resend, Inc.: delivery of the waiting-list confirmation email, United States. Resend only intervenes if you join the waiting list, and for that single sending. No other data communication takes place, save legal obligation.
7. Transfers outside the EU
The site's hosting and the waiting list's storage are located in the European Union, and no page of this site addresses a server other than ours, the waiting-list form included, which posts to our own domain. Operations or support our hosts may run from third countries are governed by the standard contractual clauses embedded in their data processing agreements. One single operation leaves the Union, and only if you sign up: the delivery of the confirmation email, entrusted to Resend, Inc., a US company. Our server transmits your address to it, for that single sending. This transfer is governed by the European Commission's standard contractual clauses (decision 2021/914), embedded in our data processing agreement with Resend. You can obtain a copy by writing to privacy@proofplaces.com.
8. Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability, and the right to set directives on your data after death. Write to privacy@proofplaces.com: we answer within one month, and we will never ask for an identity document except in case of serious doubt. You may also lodge a complaint with the CNIL (Commission nationale de l'informatique et des libertés), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr.
9. The mobile app
The Proof. app is not distributed yet. It will process more data than this site and will have its own privacy policy, published with it and reachable from the app. This policy covers only the site.
10. Changes
We may amend this policy, notably if the site evolves. The last-updated date sits at the top of the document. If a change really matters, a new data point or a new recipient, we tell you: a banner on the site, and an email if you are on the waiting list.