Data controller

Ilyas Hammouti, sole proprietor (SIRET 992 926 337 00013), is the controller of the data collected on MiddlePoint. Contact: ino.entreprise@gmail.com.

Data we collect

Addresses you enter (Social/Roadtrip mode): sent to Google Maps Platform for geocoding and route calculation. Not stored on our servers: they stay only in your browser, even after refreshing the page, and disappear when you close the tab. Exception: addresses your friends submit via the “Invite friends” feature are temporarily stored on the server — see “Collection sessions” below.
Geolocation: only if you use the geolocation button, with your explicit consent via the browser.
Address book and groups: saved only in your browser's local storage (localStorage). They never leave your device and are not sent to any server. If you clear your browser data or switch devices, they are lost.
Collection sessions (“Invite friends”): if you use the “Invite friends” link, the name and address each friend enters are stored on our servers for the duration of the collection, then automatically deleted after 7 days at most. You can optionally import these addresses into your local address book before they're deleted — they then follow the same rules as the address book above.
MiddlePoint Plus account: if you subscribe to the paid plan, your email address and subscription state (plan, status, period end date) are kept for as long as the subscription lasts. Your card details never pass through MiddlePoint: you enter them directly with Stripe, which processes the payment.
Browsing data: via Microsoft Clarity (behavioral analytics: clicks, scrolling, anonymized session recording) when this tool is enabled, to understand how the site is used and improve it.

Who receives your data

Your data is sent to the following providers:

Google Maps Platform (geocoding, route calculation, place suggestions),
Supabase, which hosts our database: the names and addresses collected through “Invite friends”, along with your MiddlePoint Plus account and subscription,
Cloudflare, which hosts and delivers the site,
Stripe, for payment and MiddlePoint Plus subscription management, only if you subscribe,
the matching booking partner (TheFork, Booking.com, Viator, GetYourGuide, Yelp, Uber...) only if you click a booking or ride-hailing link yourself,
Microsoft Clarity, if behavioral analytics is enabled.

We do not sell or share any individual data (identifiable or traceable to you) with third parties. If you ticked “Anonymized data sharing” in the cookie banner, aggregated statistics (e.g. search trends by country, searched category) may be shared with commercial partners. These statistics always group several users together (never a single event) and contain no identifier, address or precise location.

Legal basis and retention

Processing is based on the performance of the requested service (calculating the meeting point, managing the subscription) and, for analytics, on your consent. The addresses you enter are not kept beyond your browsing session. Names and addresses collected through “Invite friends” are deleted automatically after 7 days. MiddlePoint Plus account data is kept for as long as the subscription is active, then deleted on request (see “Your rights”). The local address book stays on your device until you delete it yourself.

Your rights

Under the GDPR, you have the right to access, rectify, erase and port your data, as well as the right to withdraw your consent at any time. To exercise these rights, write to ino.entreprise@gmail.com. You can also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).

Cookies and local storage

MiddlePoint uses your browser's local storage to remember your preferred language, your address book and your groups. No advertising cookies are used. Microsoft Clarity, when active, may set its own technical analytics cookies.