Privacy policy

Last updated: 2026-10-12

Data controller

The controller of the personal data collected on this site is WikiPlant, reachable at contact@wikiplant.net.

The site is published by a private individual acting in a non-professional capacity, who has chosen not to publish their identity under article 6-III-2 of the LCEN. That identity has been given to the host. Any request about personal data can be sent to contact@wikiplant.net and will be answered within one month.

Data collected

WikiPlant collects only what you provide yourself, by creating an account or posting a listing:

• Name or nickname, as you enter it
• Email address, used to sign in and to confirm your account
• Messages exchanged with other users of the site
• The content of your listings (plant offered, description, type of exchange)
• Postcode and town, to place a listing on the map
• Photographs you upload

No full postal address is asked for. No payment details are collected: the site handles no payments.

The location shown on the map is that of the town, not of a home.

Purposes and legal basis

• Running your account and publishing listings: performance of the service you asked for
• Putting users in touch with one another: performance of the service you asked for
• Audience measurement: only with your consent, which you can withdraw at any time

Where the data is stored

Accounts, listings, messages and photographs are stored with Supabase, which provides the site's database and file storage.

Supabase stores this data on servers it operates. If you want to know where a particular piece of your data is held, write to contact@wikiplant.net and we will tell you.

The site's pages are served by Netlify, Inc., established in the United States. Netlify adheres to the EU-U.S. Data Privacy Framework.

Providers

• Supabase: the database, your account and sign-in, photograph storage, and the single email that confirms a new account
• Netlify, Inc.: hosting and delivery of the site's pages
• Google Ireland Limited (Google Analytics 4): audience measurement. Its script is fetched only after you have accepted, and nothing is requested from it before that.
• OVH: hosting of the contact@wikiplant.net mailbox, in France. Mail you send to that address is held there until it is dealt with.

No data is sold, rented or exchanged.

Audience measurement

This site uses Google Analytics 4 (property G-NB740CF1MD) to measure site traffic, and only once you have agreed to it. Nothing belonging to Google is fetched when you arrive: the refusal is placed in the page first, and the script itself is requested only if you choose "Accept all". The three advertising signals are refused permanently and are never granted whatever you answer.

Until you accept, no request is made to Google at all, no cookie is set, and nothing identifies you or links one visit to the next. If you refuse, or ignore the banner, or close it, nothing is ever sent.

If you accept, the measurement records which page was viewed, roughly where the visit came from, and how long it lasted. Five actions are also counted: a listing published, a contact button pressed, a search made by town, an account created, and a search made in the plant library. The first four are a bare number with nothing attached: the town searched for is not sent, nor is the listing, nor who pressed anything.

The plant search is the one that carries a word. When you search the library, the plant name you typed is counted anonymously, lowercased, cut to 40 characters, together with the number of results it found. It is not attached to you, to an account or to a visit, and it is used to see which plants people look for and which ones are missing. Anything that does not look like a plant name is discarded before it is sent rather than shortened: a search containing an "@", or more than three digits, is never counted at all.

Only the path of the page is sent, never the query string: the site’s own addresses can carry a listing owner’s identifier or the page you were going to before signing in, and none of that reaches Google. No email address, no user identifier, no name and no message content is ever sent. IP addresses are anonymised, advertising features and ad personalisation are switched off, and the data is not used to build an advertising profile.

You can change your mind at any moment through the "Cookie preferences" link at the bottom of every page. Withdrawing takes effect immediately: measurement stops on the page you are on and the cookies already set are deleted, without waiting for a reload. The cookies set, their lifetime and how long Google keeps the data are set out on the cookies page.

How long data is kept

Your account data is kept for as long as the account exists. You can ask for it to be deleted at any time; the listings and messages attached to it are deleted with it.

A listing you delete is removed from the database. A listing you pause stays in your account but is hidden from everyone else.

Measurement data held by Google is kept for 14 months from your last visit, after which it is deleted automatically. The analytics cookie in your browser expires after 13 months.

Your choice about measurement cookies is kept in your browser for 6 months, after which you are asked again.

Your rights

You have the right to access your data, to have it corrected or erased, to object to its processing, to restrict that processing, and to data portability.

To exercise any of these, write to contact@wikiplant.net saying what you want. You will receive an answer within one month.

If you believe your rights are not being respected, you can lodge a complaint with the French data protection authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or at www.cnil.fr. You may also complain to the data protection authority of the country where you live or work.