Privacy policy

In short

GISFire asks for no account and offers no form, no comments and no file upload. You therefore send us nothing that identifies you, and this site sets no cookie.

Three things remain nonetheless, and this page describes them without playing them down: a cookieless audience measurement, the server logs, and the outside services your browser contacts itself in order to draw the map.

Who is responsible

The processing is carried out by the joint publishers of the site, SARO and Gistin.

Identity and contact details of the data controller

SARO, a sole trader based in Toulouse, France, SIRET 924 821 366 00011, and Gistin, in Abu Dhabi. The detail is in the Legal notice.

Contact

contact@saro.app

Audience measurement

Every page loads a measurement script served by stats.saro.app. It is an Umami instance we host ourselves, on the same server as the site: the measurements go to no third party.

In its default configuration, Umami sets no cookie and writes nothing on your device. Your IP address is not kept: the server derives a session fingerprint from it with a salt that changes every day, which makes it impossible to recognise you from one day to the next.

What is recorded: the page viewed, the page you came from, the country, the language, the type of device and the browser. Nothing else, and nothing that leads back to a person.

Legal basis: our legitimate interest in knowing how much the site is used. With no cookie and no writing on your device, this measurement does not require your prior consent; it did, on the other hand, have to be stated here, and that is what it is doing.

Retention period for audience measurements

25 months, the ceiling the CNIL applies to audience measurement trackers. A daily purge runs on the instance and deletes measurements beyond that period.

What your browser keeps on your side

The map places a few display markers in your browser's local storage. None of them holds an identifier, none is sent to the server, and they only serve to avoid showing you the same thing twice.

• gisfire.splash.vu and gisfire.splash.session: the opening screen has already been seen.
• gisfire-tutoriel-vu: the map tutorial has already been followed.
• gisfire.visites: a plain visit counter, used so that a tip is not suggested on the very first visit.
• gisfire.notice.<notice>: this notice has already been shown or dismissed.

Clearing this site's storage in your browser erases them, with no consequence other than seeing the opening screen again.

Server logs

The server that delivers the site keeps an access log: IP address, date and time, address requested, response code, declared browser and originating page. It is needed to keep the service running, to understand a failure and to spot abuse.

Retention period for access logs

366 days at most. Log rotation deletes the server access logs past that period.

What your browser fetches elsewhere

Drawing the map means downloading tiles and imagery from outside services. Your browser contacts them directly: those services therefore see your IP address, and we have no hold over what they do with it. Their own policies apply.

• CARTO (basemaps.cartocdn.com), a United States company: the base map. This call entails a transfer of your IP address outside the European Union.
• OpenFreeMap (tiles.openfreemap.org): the fallback base map, called only if the previous one does not answer.
• EOX (tiles.maps.eox.at), Austria: the Sentinel-2 satellite imagery.
• Open-Meteo (geocoding-api.open-meteo.com), Germany: place search. What you type leaves a quarter of a second after your last keystroke, which means incomplete entries are sent too.
• Ko-fi, and only if you click the tip link: it takes you off this site, onto a page that has its own trackers and whose payments are handled by Stripe.

What our server fetches for you

The other sources are queried by our server, then served from our own domain. They receive the server's address, never yours:

• NASA FIRMS: the active fire detections.
• NASA GIBS: the smoke plume imagery.
• Open-Meteo: observed and forecast wind, and air quality.
• adsb.lol: the positions of the water bombers.
• AWS Earth Search (Element 84): the Sentinel-2 image catalogue.
• Google News: monitoring of press articles that mention a fire.
• Anthropic: reading those press articles to extract the town and the burnt area. No visitor data is passed to it.

What we do not do

No advertising, no ad network, no resale, no profiling. No Google Analytics and no Google Tag Manager, no social network button, no tracking pixel. This site sets no cookie: that is why it does not ask for your consent, it has nothing to ask you for.

Your rights

You have a right of access, rectification, erasure, restriction and objection over the data concerning you.

One caveat, in fairness: the audience measurement keeps nothing that would let us find you again, and the server logs are indexed by IP address alone. An access request can therefore only succeed if you give us the IP address and the period concerned.

To exercise these rights, write to contact@saro.app.

You may also lodge a complaint with the French data protection authority, the CNIL.

Changes

This page follows the code: it is corrected as soon as a source, a third-party service or a measurement changes. The update date shown at the top is the one that counts.