Last updated: 24 October 2026.
This is a translation provided for your convenience. The French version, Politique de confidentialité, is the only one that is legally binding.
Panoralia runs in your browser. Your GPS tracks, your photographs, their EXIF data (including geolocation) and your captions are read, processed and assembled on your device. None of these original files is sent to our servers.
So that closing a tab does not make you start all over again, the poster in progress is kept on your device, in the storage space your browser sets aside for this website: the track, the settings, the captions and the photographs, reduced to the size a poster can use. None of it leaves your device and nobody else can access it, not even us. Only one poster is kept, the next one replaces the previous one, and the home page then offers to resume it or to start from scratch, which erases it immediately. Clearing this website's browsing data erases it too.
There are two exceptions, and you are the one who triggers them: buying a poster, which sends us the finished poster, and importing a track from Strava. Both are described below.
The finished poster is sent to us, and nothing else: an image containing your photographs, your track and your captions as they appear on the poster. It is uploaded when you place your order, so that you can retrieve it even if the page closes during payment, and so that it can be passed on to the printer if you ordered a print. It is stored in Europe, with Cloudflare (R2 storage, European Union jurisdiction), at an address that only the link in your email can reach. It is deleted automatically thirty days after the order, and cannot be recreated afterwards, since we do not have the original files.
Payment is handled by Stripe, which collects your email address, your name, your card details and, for a print, your delivery address. Panoralia never has access to your bank details. Stripe also issues your invoice.
Your email address is used to send you the order confirmation, the retrieval link for your poster, the invoice and, for a print, the shipping notice with parcel tracking. These emails are sent by Brevo. Brevo is set up not to link any email opening to your address. However, the links in these emails go through a Brevo server, which records the click before redirecting you: Brevo uses this for the security of its sending service and to fight fraudulent emails, and Panoralia does not use this information.
For a print, the poster, your name, your delivery address and your email are sent to our printer, Gelato, which prints the poster, hands it to the carrier and gives us the tracking number. The carrier receives your name and address.
Panoralia offers. As provided in our terms and conditions, your email may also be used to write to you about your posters and our offers, for products similar to the one you bought. You can refuse this with a box when you order, and at any time afterwards through the unsubscribe link in every email, or by writing to us. After three years without a purchase or any exchange, your address is removed from this list. The list is kept with Brevo, in Europe, and contains only your email: no name, no address, no content from your posters. It is neither sold nor shared. To find out whether our offers are of interest, we count the discount codes used, never your openings or your clicks.
On the device that placed the order, the retrieval link is also kept in the browser's storage, so you do not have to look for it in your emails.
The Strava connection is optional: without it, Panoralia works exactly the same way, by dropping in a file. If you use it, here is what happens.
Strava is a third-party service, subject to its own privacy policy.
We count visitors per day and per country, and the posters approved at the proof stage, without cookies or identifiers. Each tab receives a random number, which disappears when it is closed: it is only used to avoid counting the same visit twice in a day, or the same poster twice, and is kept for 24 hours. It does not allow us to recognise you from one visit to the next. Your IP address is not recorded, only the country deduced from it. We also note where the visit comes from, in four categories (Instagram, Facebook, search engine, direct access), based on the link followed or the previous site; it is counted with the visit, with the approved poster and, if you buy, with the order. For each approved poster, we keep its settings (style, format, number of photos), the language of the page, the day and the time spent creating it. Posters sold are counted the same way, with their price. The region of the hike, rounded to about ten kilometres, is counted separately, month by month and by language, with no link to your visit or to any order. These statistics are kept with Upstash. They are anonymous and kept with no time limit.
Our host, Vercel, keeps technical logs (IP address, date, URL called) needed for the service to run and stay secure. These logs are also used to limit the number of requests per IP address, to protect the free map services Panoralia depends on.
Panoralia uses no advertising trackers. The only cookie the service may set is the Strava connection cookie described above, and only if you ask for that connection. Usage statistics do not use any. Payment takes place in Stripe's form, which sets its own cookies, needed for payment security. As all these cookies are strictly necessary for a service you requested, they do not require prior consent: that is why no banner is shown to you.
The data controller is Vincent Daoulas, sole trader, under the trading name Panoralia, whose contact details are given in the legal notice.
Our processors are Stripe (payment and invoices), Brevo (sending emails), Gelato (printing and shipping prints), Cloudflare (storing the poster), Upstash (statistics) and Vercel (hosting). Some are established outside the European Union or have subsidiaries there, notably in the United States: these transfers are covered by the European Commission's standard contractual clauses or by the EU-US Data Privacy Framework.
You can ask for access to your data, its rectification, its erasure, the restriction of its processing and its portability, and object to receiving our offers, by writing to contact@panoralia.com. Erasure cannot apply to invoices, which the law requires us to keep. If you believe your rights are not being respected, you can lodge a complaint with the CNIL, the French data protection authority, or with the authority of your own country.