Política de privacidade
Introduction
Vagabond SAS ("Vagabond", "we") is committed to protecting the privacy of users of its website www.vagabond.gg and its Vagabond mobile application. This policy describes the data we collect, processing purposes, your rights, and how to exercise them.
Data collected via the website
When you use our website or contact us, we may process: • Identity and contact details: name, email address, organisation (optional) submitted via the contact form or by email; • Aggregated browsing data: pages viewed, device type, country — via Vercel Analytics (anonymised statistics, no advertising cookies); • Meeting booking data: when you book a slot via the HubSpot Meetings embed on the Pro page, information entered is processed by HubSpot in accordance with their privacy policy.
Data collected via the app
The Vagabond mobile app may process the following categories of data: • Account: identifier, email, username, profile photo (via Firebase Authentication); • Location: GPS position while the app is active, to display your position, validate your presence at a place, and update your progress map; • Activity: visited places, badges, challenges, travel statistics; • Content: photos taken or imported during your visits; • Preferences: public/private profile settings and notification settings.
Processing purposes
Your data is used to: • Provide and improve the service (map, place validation, gamification); • Create and manage your user account; • Respond to contact or demo requests (Vagabond Pro offer); • Ensure security and prevent fraudulent use; • Measure website traffic in aggregated form; • Comply with our legal obligations.
Legal basis
We process your data on the following bases: • Contract performance: providing the service when you use the app or request a demo; • Legitimate interest: service improvement, security, aggregated website statistics; • Consent: when required (e.g. mobile geolocation, push notifications) — you may withdraw consent at any time in your device or app settings.
Retention period
• Contact data (website): 3 years from the last exchange; • App account: kept while the account is active, then deleted or anonymised within 3 years of closure; • Aggregated browsing data: according to Vercel Analytics policy.
Recipients and subprocessors
Your data may be accessible to our technical providers, solely for service needs: • Vercel (web hosting and analytics); • Firebase / Google Cloud (mobile authentication); • Mapbox (mapping); • HubSpot (B2B meeting booking); • Fly.io and AWS (API infrastructure). We do not sell your personal data. Transfers outside the European Union, where applicable, are governed by appropriate safeguards (standard contractual clauses or equivalent).
Your rights
Under the GDPR, you have the rights of access, rectification, erasure, restriction, portability, and objection. To exercise them: contact@vagabond.gg. We will respond within one month. You may also lodge a complaint with your local data protection authority.
Cookies and trackers
The website does not use advertising cookies or audience measurement requiring consent under ePrivacy rules. Traffic statistics are processed via Vercel Analytics (aggregated, privacy-friendly data). The HubSpot embed on the Pro page may set HubSpot cookies when you interact with the meeting booking widget.
Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure.
Changes
We may update this policy. The last updated date appears at the top of the page. In case of material changes, we will inform you by appropriate means.