Privacy

This page describes what the site actually does in its current state. It must be updated at the same time as any new analytics tool or any new form.

What the site collects today

No account, no comments, no advertising tracker. One analytics tool is active, described under “Analytics” below.

Site search runs entirely in your browser: your query is never sent to a server.

Contact form

Your name, email address and message are relayed by email to the editorial desk and are not stored anywhere. The legal basis is your consent, given by ticking the box before sending. We use the address only to reply to you.

Analytics

The site uses PostHog (hosted in the European Union) to understand how it is used and where the trip planner loses its visitors: page views, where visits come from, planner steps (questionnaire, preview, full trip requested and delivered), heatmaps and session recording. Session recording replays movements and clicks on the page; the content of input fields is masked and never recorded.

• No cookie: the visit is linked by a random identifier, kept in the browser tab for the duration of the visit (browser session storage) and erased when it closes. No cookie is set.
• Through our own domain: the script and the data go through our own server (/ingest), which forwards them to PostHog. Your browser contacts no third-party analytics domain. PostHog is set not to keep your IP address.
• What is sent: page views, device type, language, where the visit came from (search engine, link, email campaign) and, for the planner, the shape of the stay requested (length, type of travellers, season). Never your name or email.
• Purpose: audience measurement and improving the site and the planner. No resale, no advertising targeting, no tracking across sites.
• Opting out: measurement honours your browser's “Do Not Track” signal: if it is on, nothing is collected. The site stays fully functional.

Third-party services called by the pages

• Fonts: self-hosted. No request to Google Fonts.
• Maps: the lake map is a local vector drawing. No third-party tiles, no cookie. The “get directions” links open Google Maps in a new tab, and only when you choose to click them.
• Home page video: served from our own domain, not from YouTube or Vimeo.
• Weather: the temperature shown at the top of the home page comes from a request your browser makes to Open-Meteo, a European service with no account and no cookie. That request sends the latitude and longitude of Annecy — never your own position — and your IP address, as any web request does. No identifier, no tracker. If the call fails, the page simply shows the date without a temperature.

Trip-planning assistant

The Plan your trip page uses two third-party services to build your itinerary: a language model (DeepSeek) for reasoning and a web-search engine (Tavily) to find real places. For the one-day preview, nothing is tied to your identity: your answers are sent and processed, and the preview is cached for a few hours with no link to you. For the full trip, sent by email, a limited retention applies — see “Full trip and planner emails” below.

• Legal basis: your voluntary decision to use this page.
• Processor — generation: DeepSeek. Your travel profile and conversation history are sent to its servers (outside the EU) to generate the itinerary.
• Processor — web search: Tavily. Each search query from the planner is routed through Tavily's servers (United States); only the text query is sent, no identity data.
• Data involved: the text you type in the chat and your answers to the four starting questions (who's travelling, duration, style, lodging area).

Full trip and planner emails

The full trip is free. To receive it, you enter your email address after the preview: the itinerary shows up on screen and is sent to you by email.

• What is sent: your full itinerary, with its link, then, if you gave dates, the day before you leave, the forecast and the events on your dates. Every email carries a one-click unsubscribe link.
• Annecy’s events and tips (optional): a box, unticked by default, lets you also ask for Annecy’s events and tips, 2 emails a month at most. We then write to you once to confirm; without a click on “I confirm”, you get nothing beyond your trip. We keep proof of your consent: its date, its language and the exact wording of the box.
• What is kept: the address, the language, the shape of the trip requested (length, type of travellers, season, dates) and the number of trips requested, for up to 120 days in a Cloudflare database (KV), then automatically deleted. If you confirmed the tips: 3 years after our last contact. The itinerary itself is kept for 30 days, so you can find it again from its link. The forecast comes from Open-Meteo, queried without personal data.
• Processor: Resend, for sending the emails.
• Legal basis: performance of the service you request for the itinerary and the emails about your trip; your consent for the tips, withdrawable at any time via the unsubscribe link or by writing to us.

Payment (former offer)

Until 13 October 2026, the full trip was paid (€5) and went through Stripe, which hosted the payment page itself, with no cookie set on annecyvibes.com. For those orders, Stripe handled the payment and the receipt email address (a transfer outside the European Union is possible); the itinerary and its email are kept for up to 30 days in a Cloudflare database (KV), then automatically deleted. Legal basis: performance of the service ordered (contract).

Email alerts

On some pages you can ask to be notified of an expected piece of information (for example the Christmas market dates, as soon as they are published). It is optional.

• What is sent: one email to confirm your request — without a click on “Confirm”, we do not write to you again — then a single email, on the day the information is published. Every email carries an unsubscribe link.
• What is kept: the address, the language, the chosen alert and the request and confirmation dates, in a Cloudflare database (KV). An unconfirmed request is erased within 7 days; the others 30 days after the alert is sent (180 days at most).
• Processor: Resend, for sending the emails.
• Legal basis: your consent, confirmed with one click and withdrawable at any time via the unsubscribe link or by writing to us.

Your rights

You have the right to access, correct, erase and object to the processing of your data. To exercise it, write to the contact address given in the legal notice. You may also lodge a complaint with the French data protection authority (CNIL).