Privacy
Maya keeps the bare minimum needed to work: an email address to sign you in, a display name to sign your contributions. Nothing else, and nothing that goes anywhere else.
This English text is provided for convenience. The French version of this document is the only legally binding one, and prevails in the event of any discrepancy.
What is kept
For your account: your email address, a display name you choose, your interface language, the date the account was created and the date you last signed in.
For your contributions: the recipes you post, the ratings and comments you leave. They are public and signed with your display name — never with your address.
For signing in: the single-use code emailed to you is stored as a hash, never in clear text, along with the IP address that requested it. Those rows are erased after twenty-four hours.
What is not kept
No passwords: sign-in uses a single-use code, so there is nothing to leak.
No advertising trackers, no analytics cookies, no third-party service loaded into your pages. Maya sets no cookies — your session lives in your browser’s local storage and disappears when you sign out.
No data is sold, rented, or passed to a third party for commercial purposes.
Why, and on what basis
The email address is used to authenticate you: without it there is no account, no attribution of contributions and no “one review per person” — which would leave the rating system meaningless. This is performance of the service you request by creating an account.
The IP address of code requests is used to rate-limit them. Without that counter, a single machine could trigger thousands of emails to third-party addresses in our name. This is a legitimate interest, and the retention period is the shortest that lets the counter work.
For how long
Sign-in codes and the associated IP addresses: twenty-four hours.
Sessions: thirty days, or until you sign out.
Account and contributions: until you delete them.
Deleting your account
Deletion happens from the “Your account” screen, with no request and no delay. It erases your email address, display name, sessions and every review you have written — the ratings of the recipes concerned are recomputed immediately without your votes.
Your recipes stay online, made anonymous. Others rely on them and have rated them: erasing them would take away knowledge the community has confirmed. If you want a recipe gone, delete it before closing your account — the screen reminds you.
Your rights
You have the right to access, rectify, erase, restrict and object to the processing of your data, as well as the right to data portability. The “Your account” screen covers most of it without going through us; for anything else, write to contact@subalpine.it.
You may also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).
Where the data lives
Data is hosted in France, at OVH SAS, 2 rue Kellermann, 59100 Roubaix, France. Traffic to and from the site is encrypted (HTTPS). It does not leave the European Union.