Privacy policy

Powerland Map is the service through which the data below is collected. The data controller is THE PLATFORM COMPANY, the French company identified below

For any privacy request, write to matthieu@powerlandmap.com

• Access requests — the full name, work email, company and message you submit on the request-access form are used only to review your application, reply to you and, where relevant, prepare a scoped proposal. They are not added to any mailing list and are not shared with third parties
• Subscriber accounts — the email address and authentication data needed to operate your account, plus the plan entitlement attached to it, are processed to deliver the subscription you contracted
• Audience measurement — first-party page-view records (path, page title, referrer, device type and time on page) stored with a random session identifier so the pages of one visit can be grouped. The identifier is generated in your browser, is never linked to your identity or to an account, and is stored with each record on our own servers for the retention period below. No advertising identifier, no cross-site tracking, no third-party analytics service
• Direct correspondence — emails you send us are kept for as long as needed to handle the exchange

• Reviewing access requests and replying to them — legitimate interest in assessing who may be granted access to a vetted professional service, and pre-contractual steps taken at your request
• Operating subscriber accounts, authentication and entitlements — performance of the subscription contract
• Keeping the service secure and available, including protection against abuse — legitimate interest in the security of the service
• Sending transactional messages tied to your request or account, such as authentication and service notices — performance of the contract, or legitimate interest for pre-contractual exchanges
• First-party, aggregate audience measurement — legitimate interest in understanding which pages are useful, using no advertising identifier and no cross-site tracking
• Measuring the effectiveness of our advertising campaigns with the Google Ads tag — your consent
• Meeting accounting and legal obligations — compliance with a legal obligation

Personal data is never sold. Apart from the Google Ads campaign measurement described below, which runs only with your consent, it is not shared for advertising or marketing purposes. A limited number of service providers process it strictly on our instructions and only as needed to host the service, keep it secure, operate it, store data and deliver transactional messages. Each acts as a processor, is bound by confidentiality and data-protection commitments, and may not use the data for its own purposes

The providers currently involved in delivering the service are

• Lovable Labs Incorporated (Lovable Cloud), https://lovable.dev — application hosting platform; EU contact: Lovable Labs AB, Regeringsgatan 25, 111 53 Stockholm, Sweden
• Supabase — database and authentication infrastructure on which Lovable Cloud runs
• Cloudflare — content-delivery and security network fronting the public website, including bot management
• Google Ireland Limited — Google Ads campaign measurement, loaded only after you accept it in the consent banner

Each processes personal data only as needed to host, secure and operate the service, and may not use it for its own purposes. Questions about the current list: matthieu@powerlandmap.com

The service is delivered over a global content-delivery and security network, so a request may be handled by infrastructure located outside the European Economic Area. Where a transfer outside the EEA occurs, it takes place under an appropriate transfer mechanism such as European Commission standard contractual clauses or an adequacy decision. The named providers and the specific mechanism applying to each are confirmed together with the provider list above

We run campaigns to reach infrastructure professionals, and we measure their effectiveness with the Google Ads tag (account AW-18432362696), operated by Google Ireland Limited. This tag is loaded only if you accept it in the consent banner shown on your first visit. Until then — and permanently if you reject — advertising storage, analytics storage, ad user data and ad personalisation are all set to denied, and no Google script is requested by your browser

• Legal basis — your consent, given through the banner and revocable at any time
• What it can set once accepted — Google advertising cookies and identifiers used to attribute a visit or an action to a campaign
• Recipient — Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, acting for the measurement described here
• Your choice is stored locally in your browser under a Powerland Map key, so it is remembered on your next visit

You can change or withdraw your choice at any time, and the banner will be shown again

Apart from the Google Ads measurement described above, which only runs with your consent, this website sets no third-party tracking cookies. The other browser storage used is

• Authentication session (local storage) — keeps subscribers signed in; essential to the service
• Interface preference (local storage) — remembers a display preference such as language where offered
• Anonymous session identifier (session storage) — groups the page views of one visit for first-party audience measurement; it is random and is never linked to your identity. The browser copy is cleared when the browser session ends, while the copy stored with each page-view record is kept for the retention period below
• Consent choice (local storage) — records whether you accepted or rejected Google Ads measurement, so we do not ask again on every visit
• Essential security cookie (__cf_bm) — set by the Cloudflare network that fronts this website to distinguish human visitors from automated traffic; it is short-lived, is used only for bot management and carries no advertising or profiling purpose

If a further non-essential tracker is ever introduced, this page will be updated and consent will be collected before it is set

Personal data is kept no longer than necessary for the purpose it was collected for, then deleted or reduced to aggregate statistics that identify no one

• Access requests — for the time needed to review the application and follow up on it, and afterwards only where a legal or evidential reason requires it
• Subscriber accounts — for the duration of the subscription, plus any period imposed by accounting or limitation rules
• Correspondence — for as long as needed to handle the exchange and any follow-up it generates
• Audience measurement — page-view records, including the random session identifier, are kept for at most 180 days from collection and then deleted automatically. This retention applies to records collected from 6 September 2026 onwards; only aggregate counts are used afterwards

Under the GDPR you can request access to, rectification or erasure of your personal data, object to or ask for restriction of its processing, and request portability. Write to matthieu@powerlandmap.com and we will respond within the legal timeframe. You may also lodge a complaint with the CNIL, the French supervisory authority (cnil.fr), or with your own supervisory authority

• No sale or rental of personal data, and no advertising tracker loaded before you accept one
• No marketing emails without your explicit consent
• No pre-ticked consent of any kind
• No profiling or automated decision-making about you

The boundaries applied to published market data — including anonymised demand and confidential contributions — are described in the data policy