Privacy policy
In short. Opota has no user account, no analytics, no advertising and no tracking. The app’s requests pass through one small server of ours in Germany, which hands them on to two French public services and keeps nothing about you.
Three things hold for your location in particular:
- It never leaves the EU. It passes through our server in Germany to the geocoding service of the French administration, running in France. There is no transfer to a third country.
- It is only ever sent because you asked. Only once you tap “Use my location” and grant the permission. If you do not, type the place name instead — the app does everything it otherwise does.
- It is used once and forgotten. Our server passes it on and drops it as soon as the commune is known. It is not stored, not written to any log and not linked to you.
1. Controller
Le Bon Mot GmbH
Florianigasse 10/3/2, 1080 Vienna, Austria
Commercial register FN 531957s, Commercial Court of Vienna · VAT ATU75485912
Managing directors: Mag. Céline Juyou, Mag. Christian Mayr
E-mail: carafe@opota.fr · Telephone: +43 699 17 99 68 63
2. What stays on your device
The app stores the following locally only, without transmitting it to us or to anyone else:
- the communes you checked most recently, so you can find them again quickly;
- the analyses last retrieved, so a result stays readable without a connection;
- the list of communes you have ever opened — it counts down the three free places and consists only of official commune codes;
- your store's last confirmation that a purchase is active, with its order number — it is what keeps your access working when the store cannot be reached. It comes from Apple or Google, never from us, and it contains no payment details.
We have no access to any of it. Clearing the app's data removes it from the device.
Some of this outlives the app itself, so that the three free places cannot be renewed by reinstalling. On Android, if you have your device's backup switched on, the system includes this app's data in your Google account backup and restores it on the next install. On iPhone and iPad, two of the lists above are additionally kept in the iCloud keychain — the communes you have opened and the ones you checked most recently: deleting the app does not clear them, and they follow your Apple Account to your other devices. Both copies are made by the operating system into your own account, not by us into ours; both are encrypted with a key that stays on your side, so neither Google nor Apple can read them, and we cannot reach them at all. You control them in your device settings — under Backup on Android, under your Apple Account → iCloud on iPhone and iPad. The analyses themselves are never synchronised, and neither are your purchases.
3. What leaves the device
Everything the app asks goes to one address: our relay at opota.fr. It passes
the request on to the French public service that can answer it and hands the answer back. The
French services therefore see our server, not your device and not your IP address.
| Recipient | What is transmitted | Why |
|---|---|---|
Opota relayopota.frLe Bon Mot GmbH, hosted by ALL-INKL.COM – Neue Medien Münnich, Friedersdorf, Germany | your IP address, as with any connection; when you search: your search term; when you tap “Use my location”: your geographic coordinates; for a result: the code of the chosen commune. | To pass your request on and return the answer. |
Géoplateforme geocodingdata.geopf.frIGN, France | from our server, not from your device: your search term, or your coordinates. | To identify the commune an analysis should be fetched for. |
Hub’Eauhubeau.eaufrance.frBRGM / OFB, France | from our server, not from your device: the code of the chosen commune. | To retrieve the official control results. |
What the relay keeps, and what it does not:
- Answers about communes — analyses and search results — are kept for up to 30 days, so that a slow or unavailable source does not leave you without a result. They are filed under the commune code or the search term and contain nothing about who asked.
- Your coordinates are never kept. The app sends them in the body of the request, which no log records; the relay uses them for that one lookup and discards them.
- Your IP address is needed to send the answer back and is not recorded:
the web server's access log for
opota.frreplaces every IP address with 0.0.0.0. It holds the time, the requested address — so a search term or a commune code, never coordinates — and the app's identifier, but nothing that leads back to you.
Our hosting provider operates the server on our behalf under a data processing agreement (Art. 28 GDPR). Both French services are public services of the French administration; how they handle requests is governed by their own terms.
On location, explicitly.
Voluntary. The location permission is never requested at launch, only at the moment you tap “Use my location”. If you decline it, or revoke it later in your device settings, the app stays fully usable: you type the place name, and no location is transmitted.
Within Europe only. If you do tap it, your latitude and longitude go to our server in Germany and from there to the geocoding service of the French administration, so that they can be turned into a commune — there is no other way to derive one from a position. Both run inside the European Union, so no transfer to a third country within the meaning of Articles 44 ff. GDPR takes place.
Passed on, not kept. Our server holds your coordinates only for as long as it takes to get the commune back, usually well under a second. They are not written to any file, database or log, and the answer to them is not cached. We therefore do not store your location and cannot look it up afterwards.
4. Purchases
Purchases are handled entirely by the app store you installed Opota from — Google Play on Android, the App Store on iPhone and iPad. That store is the seller and processes payment and account data under its own responsibility; its own privacy policy applies. We receive no payment data. The app merely asks the store whether a valid purchase exists for this store account, and keeps the answer on the device.
If you write to us about a purchase, we see what you tell us yourself — usually your e-mail address and the order number from your store receipt. We process that only to handle your request.
5. What we do not do
- no user accounts, no registration;
- no analytics or statistics services, no crash-reporting SDK;
- no advertising, no advertising identifier, no profiling;
- no sharing or selling of data;
- no automated decision-making within the meaning of Article 22 GDPR.
The anonymised crash and usage statistics that Google Play and App Store Connect make available to developers originate in the operating system, not in the app; whether such data is transmitted is controlled in your device settings.
6. Legal bases
The queries through our server to the geocoding service and to Hub’Eau are necessary in order to provide what you asked for (Art. 6(1)(b) GDPR). Use of your location rests on your consent, which you give by granting the system permission and can withdraw at any time in your device settings (Art. 6(1)(a) GDPR). Handling purchases and answering enquiries rest on performance of a contract (Art. 6(1)(b) GDPR).
7. Retention
Data stored on the device remains until you clear its data or uninstall the app — with the two exceptions described in section 2: on Android an account backup restores it on the next install, and on iPhone and iPad the communes you have opened and those you checked recently stay in the iCloud keychain. Those entries hold commune codes, names and postcodes, no identifier of your device and none of you; they go when you erase the device. Answers about communes on our server (analyses and search results) are deleted once they are 30 days old; they contain no personal data. Coordinates are not retained at all. We keep support correspondence for as long as is necessary to handle it and to satisfy statutory retention obligations.
8. Your rights
You have the rights of access, rectification, erasure, restriction, data portability and objection. Because we store no personal data about you, an access request can as a rule only be answered by confirming that we hold nothing about you — unless you have written to us. Complaints may be lodged with the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, dsb.gv.at.
9. Changes
We amend this policy when the app changes. The version published here, bearing the date given above, is the one that applies.