Privacy policy

This policy describes what Runometry does (and does not do) with your data. Data controller: Timothy ALCAIDE, 11 rue du Professeur Jean Granier, 34070 Montpellier, France, contact@runometry.com.

In short

• No account, no tracking cookie. You browse the Site without providing any data. The one exception is a price or stock alert you create: we then keep your e-mail address and what you watch for as long as the alert lasts (twelve months at most), then erase them; your address stays in our contact list so we can write to you about what's new, with a one-click unsubscribe in every e-mail.
• Your favourites, comparison selection and language are stored in your browser only (localStorage) and never sent to us. It also keeps, with no identifier, the models you were asked "Did you buy it?" about and your "Don't ask me again", so the question is not asked twice, and when you closed or used the sign-up box or the "send me the link" card, so they are not shown again.
• If you choose shopping preferences (gender, size, delivery included or not) or a delivery country, they are kept in a preference cookie, rm_prefs, so pages show the matching prices as soon as they load. It holds no identifier and is never stored on our side.
• When you click a retailer link, we record the click (retailer, page, position, price shown, approximate country, kind of device). We store neither your IP address nor your browser: only a fingerprint computed with a key that changes every day and is erased the day after next, to spot abnormal repeated clicks.
• After that click you are on the retailer's site. If the link is marked “Partner link”, you get there through an affiliate network, which may set a cookie to credit a purchase to the Site: their policies apply (see “Cookies and trackers”).

Data we process

Data	Purpose	Legal basis	Retention
Host's technical logs (IP address, requested page, timestamp)	security, running the service	legitimate interest	a few days, at Cloudflare
Outbound clicks (retailer, offer, page, position, price shown, partner or not, language of the page, kind of device, country as inferred by Cloudflare, delivery country of the page, site the click came from, robot or not, a daily fingerprint computed from the IP address and the browser with a key erased the day after next; neither the IP address nor the browser is stored)	measure the comparator's use, detect fraudulent clicks, check the commissions retailers report	legitimate interest	45 days for each click, then daily totals without any fingerprint
Views of shoe pages, offers and model cards seen in lists and widgets (daily totals: model, retailer, language, country, kind of page)	measure the comparator's use	legitimate interest	daily totals, no identifier
Your answer to the "Did you buy it?" question asked when you come back to the Site after an outbound click (answer, optional reason, time spent at the retailer, and what the click told: retailer, offer, model, page, position, price shown, device, country, language; tied to that click by a random key the page adds to the link, never stored in your browser nor sent to the retailer)	measure purchases after a click and what prevents them	legitimate interest	no identifier; the key is tied to nothing once the click is erased (45 days)
E-mails you send us	answer your request	legitimate interest	the exchange, then 1 year
Price and stock alerts: e-mail address, model, sizes, gender, target price, delivery country, language	send you the alert you asked for	your request (GDPR article 6.1.b)	the duration you chose (1, 3 or 6 months), then erased; at any time through “Stop this alert”
An alert's e-mail address, kept after the alerts end, with the language, delivery country and model watched	write to you about what's new (new models, releases)	legitimate interest	until you unsubscribe (one click in every e-mail) or “Erase everything”
Alert reminders: when you opened the e-mail's button, and when you opened an offer from that visit	remind you at most twice (3 and 10 days after the e-mail) while the price or the size announced holds, never after you opened an offer	your choice in the alert form (the “Remind me” box, which you can untick)	with the alert; at any time through “Stop this alert”
Sign-up for news (the box on the shoe listings): e-mail address, language, delivery country, sign-up page and its filters, page you came from, campaign parameters (utm), date and wording of the consent	tell you about new models and releases	your consent (the sign-up itself)	3 years after your last activity, or until you unsubscribe (one click in every e-mail)
Sending a page's link (on phones): e-mail address, the page and its filters, language, delivery country, date sent and of the first click on the link, keyed hash (HMAC) of the IP address	send you the link you asked for, limit abuse (3 sends an hour and 10 a day per connection, 2 a day per address); the address then joins our contact list (news)	your request (GDPR article 6.1.b); legitimate interest	until you unsubscribe (one click in every e-mail) or “Erase everything”
Keyed hash (HMAC) of the IP address when signing up for news	limit abuse (5 sign-ups an hour and 20 a day per connection)	legitimate interest	with the sign-up
Keyed hash (HMAC) of the IP address when an alert is created	limit abuse (10 alerts a day per connection)	legitimate interest	with the alert
Preferences (favourites, comparison, language)	browsing comfort	your choice	in your browser only, until cleared
Shopping preferences (gender, size, delivery included or not) and the delivery country chosen, cookie rm_prefs	show the prices that fit you	your choice	13 months at most, or until “Clear my preferences”
Your answer to the proposal of your country's site (“Go”, “Stay”, or a language or delivery country you chose), cookie rm_market	not propose it again	your choice	12 months

No data is sold or rented, and we pass on nothing that identifies you. When you click a partner link, the affiliate network receives from us where the click was made (kind of page, position of the offer, shoe model) and nothing about you; it then processes, as a separate controller, the technical data of your visit to its own domain (IP address, browser). No automated decision is made about you.

Cookies and trackers

The Site sets no tracking cookie and uses no cookie-based analytics. It has only three cookies, without any identifier, exempt from consent as you ask for them: rm_prefs, only if you choose shopping preferences or a delivery country (gender, size, delivery, country; 13 months at most, read to compute the prices shown; “Clear my preferences” deletes it); rm_ann, only if you close the announcement banner (the name of the announcement closed, 12 months, so it is not shown again); rm_market, only if you answer the proposal of your country's site or choose a language or a delivery country yourself (your answer, 12 months, so it is not proposed again). To make that proposal, the Site asks Cloudflare for the country of your connection; it is neither stored nor sent anywhere else. Cloudflare may set strictly technical security cookies when protecting the Site against bots: __cf_bm, and cf_clearance once an "are you human?" check has been passed; they do not track you.

Partner links are marked “Partner link” next to each offer concerned. Nothing is set until you click. If you click, you pass through the domain of the retailer's affiliate network (for instance Awin, Rakuten Advertising, Kwanko), which may set an attribution cookie on its own domain to credit a possible purchase to the Site, and you then land on the retailer's site. When the retailer runs its programme itself (Top4Running), you land directly on its site, with our partner id and where the click was made in the address, and the retailer may set that cookie. That cookie is how we get paid; the Site does not read it and only receives from the network the list of credited sales (date, amount, commission), never a buyer's identity.

Your choices:

• do not click a partner link and open the retailer's site yourself: the price is the same and no attribution cookie is set;
• refuse or delete these cookies in your browser, or on youronlinechoices.eu;
• read the policy of the network concerned and exercise your rights there: Rakuten Advertising, Awin.

Links without the “Partner link” mark go straight to the retailer, with no network and no tracking on our side.

Processors

• Cloudflare, Inc. (USA): hosting, network, photo storage, click counter; EU standard contractual clauses and Data Privacy Framework certification.
• Cloudflare, Inc.: sending the alert and link e-mails (Cloudflare Email Service) and the bot check of the alert and send-link forms (Turnstile, no advertising cookie).
• Google LLC (Gmail): receiving e-mails sent to contact@runometry.com.

Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability (GDPR articles 15 to 22). The data identifying you are your e-mails and, if you created an alert, your address and your alerts. Every alert e-mail has a “Manage my alerts” link to see them, stop one or erase everything, and a one-click unsubscribe; for anything else, write to contact@runometry.com. You may also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).

Changes

This policy may change, in particular when a service is added. The date at the top shows the current version.