This page explains what data we collect on Mademoiselle Bon Plan, why, how long we keep it and how to exercise your rights. We ask for as little as possible: the site has no reader accounts, and your data is never sold or rented.
Who is responsible for your data?
The data controller is Nicolas Diolez (sole trader, entrepreneur individuel), publisher of Mademoiselle Bon Plan, 14 avenue du Général de Gaulle, 94160 Saint-Mandé, France. For any question about your data: nicolas@mademoisellebonplan.fr.
The contact form
You give us your name, your email address, the subject and your message. They are used only to reply to you: the message is sent to us by email and is not stored on the site. The form does not sign you up to the newsletter.
To keep out automated messages, the form uses an invisible field and a minimum delay, without any outside service. It also limits the number of messages: a fingerprint of your IP address, not the address itself, is taken into account for one minute only.
Legal basis: our legitimate interest in replying to the messages we receive. Retention: as long as it takes to deal with your request, then 3 years at most after our last exchange.
Comments
To comment, you give a name, an email address and your text. WordPress also records your IP address, your browser type and the date. Your name and comment are public; your email address is not. Comments are reviewed before they are published.
The Akismet service (Automattic Inc., United States) analyses comments to filter out spam. To do so, it receives the comment, the name, the email address and the IP address.
Legal basis: our legitimate interest in publishing conversations and protecting them from spam. Retention: as long as the comment stays online. You can ask us at any time to edit or delete it.
The newsletter
To receive the newsletter, you give your email address and, if you wish, your first and last name. We also record the language of the page, so that we write to you in your language. Your subscription only takes effect once you click the link in the confirmation email.
Emails are sent by Brevo, a provider based in France. The form is protected against bots by reCAPTCHA, a Google service that is loaded only when you start filling it in; Google then receives technical information about your browser, including your IP address. A fingerprint of your IP address is also used to limit repeated attempts, for one hour at most.
Legal basis: your consent, which you can withdraw at any time using the unsubscribe link in every email. Retention: until you unsubscribe; if you do not open any of our emails for 3 years, we delete your address.
Audience measurement
To know which articles are useful to you, we measure visits to the site: pages viewed, where visits come from, type of device.
Matomo. Our statistics are produced with Matomo, installed on our own server (matomo.mademoisellebonplan.fr, hosted by Hostinger in France). It produces aggregated, anonymous statistics: your IP address is truncated, there is no individual tracking of visitors, and detailed data is deleted after 6 months. It sets two cookies: _pk_id, which lasts 13 months at most and is not extended on each visit, and _pk_ses, which lasts 30 minutes. Under these conditions, the CNIL, the French data protection authority, accepts that this kind of measurement runs without consent. You can still object to it at any time, just below. Legal basis: our legitimate interest in knowing how the site is visited.
Google Analytics. Only if you accept it in the cookie banner (“Statistics” category), we also use Google Analytics, a Google service, for example to count clicks to our Instagram account. Its cookies (_ga) last 13 months at most. Legal basis: your consent, which you can withdraw at any time from the banner.
Google Tag Manager. These tools are loaded by Google Tag Manager, a Google service called on every page: Google therefore receives your IP address. Google Tag Manager only triggers Google Analytics and marketing tools after you agree. Legal basis: our legitimate interest in managing these tools.
Booking links
Some links to booking or ticketing sites are affiliate links: networks such as CJ, Awin, Kwanko, Impact or Affilae, or direct programmes such as Booking.com or GetYourGuide. If you book after clicking, we may earn a commission. Our page How the blog works explains these partnerships.
For each click, our site only counts the article, the language and the date, without your IP address or anything that identifies you. For some links that go through an affiliate network, our server contacts the network directly at the time of the click and passes on your IP address and browser type, so that the booking can be credited to us. The partner site and the network may then set their own cookies: their use is covered by their own privacy policy.
Legal basis: our legitimate interest in having the commissions that fund the blog credited to us.
If you accept “Marketing” cookies in the banner, a GetYourGuide script is also loaded to credit our blog with bookings made after a click. Legal basis: your consent.
Embedded content and maps
Some articles include YouTube (Google) or Vimeo videos and, in a few older articles, content from Dailymotion, wat.tv, Deezer or SoundCloud. These players behave as if you were visiting the original site: the service receives your IP address and may set its own cookies. Where the cookie banner provides for it, they are only loaded after you agree.
The Instagram strip shows our latest posts: their images may be loaded from Meta’s servers. The social network icons are simple links: nothing is loaded until you click.
Maps display OpenStreetMap map tiles: your browser downloads them from the servers of the OpenStreetMap Foundation, which receives your IP address.
What stays in your browser
The articles you keep in “My saved tips” and your light or dark display choice are stored in your browser’s local storage. Nothing is sent to our servers, and you can clear them at any time in your browser settings. Your cookie choice is stored in a cookie described in the cookie policy.
Hosting and security
The site is hosted by Hostinger International Ltd. (Cyprus), on servers located in France. Its delivery and protection are provided by Cloudflare, Inc. (United States), which processes in particular visitors’ IP addresses to deliver pages and block attacks.
As on any website, these servers keep technical logs (IP address, page requested, date, browser), kept for security according to these providers’ own rules. A security plugin also records the IP addresses behind suspicious attempts, in order to block them; this log is kept for 30 days. Legal basis: our legitimate interest in protecting the site.
Who has access to your data?
Gaëlle and Nicolas, and the providers named on this page, each for their own part: Hostinger (which also hosts our Matomo statistics), Cloudflare, Brevo, Akismet, Google (reCAPTCHA, Google Tag Manager, Google Analytics, YouTube), Vimeo, Meta (Instagram), GetYourGuide and the affiliate networks. Your data is never sold or rented.
Some of these providers are based outside the European Union, in particular in the United States: Cloudflare, Google, Automattic (Akismet), Vimeo and Meta. Data transfers to these providers take place within the framework of the safeguards provided for by the GDPR.
Your rights
You can ask for access to your data, its correction or erasure, the restriction of its processing or its portability, and you can object to processing based on our legitimate interest. Where processing is based on your consent, you can withdraw it at any time. You can also tell us what you would like to happen to your data after your death.
Write to us at nicolas@mademoisellebonplan.fr: we will reply within one month. If you feel your rights are not being respected, you can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr), or with the data protection authority of your country.
Cookies
The list of cookies and how to change your choices are set out in the cookie policy.
Last updated: October 2026.