This translation is provided for information only. The French version is the only legally binding version. Read the French version
We keep only what is needed to put customers and carriers in touch: contact details, journey, vehicle and the carrier’s status (professional or private individual). Your contact details are only passed on to the carrier or the customer of your booking.
2. Data collected depending on how you use the site
You publish a request (customer)
Your email address (account, sign-in and tracking) and your mobile number (06 or 07) or, from abroad, your number with its country code, which is mandatory (see “Your text messages”).
Your request: type of goods, condition, handling, number of vehicles, weight, towns or cities of departure and arrival, preferred dates, whether a professional is required and, for a vehicle that runs, whether you accept a vehicle delivery driver, with the date on which you certified that the vehicle is registered, insured and has an up-to-date roadworthiness test.
Private individual or business: what you are and, for a motor trade business, the name of your company (optional) and its country (France by default). The site uses this to suggest to the carrier the VAT for their quote.
Your vehicle: its make and model and, if you provide them, what makes loading difficult (locked or missing wheels, locked steering, automatic gearbox locked, no brakes, no key, flat tyres, lowered, accident-damaged, loose parts to strap down) and additional details in free text, in which numbers and email addresses are masked.
Exact address, only if you give it: the collection address and the delivery address (number and street, or locality), chosen from the suggested addresses or typed freely. It is optional: the carriers who are alerted are chosen on the basis of the town.
Site access, if you tick these options, for collection and for delivery: narrow street or difficult access, underground car park or height limit, lock-up or closed garage, private yard with gate.
Your optional photos, reduced in size in your browser before they are sent, which generally removes the device information, including the GPS location where the photo was taken.
Then: your messages, the quotes received, your booking, the collection and delivery photos, the confirmation of delivery, the reviews given and received, your reports (description and photos).
Your responses to journeys matching your request (“I’m interested” or “Not for me”) and, if you decline a quote, the reason you choose, which is optional.
You are a carrier
Your email address, your telephone number (replaced by the mobile number requested with each journey published), your registered company name, your SIRET number, the Community licence declared and, if you give it, your number on the transport register.
If your company is established in a country served, outside France, instead of the SIRET number: the country of your company, its EU VAT number and its registration number in that country’s trade register (one or the other, or both, depending on the country).
Your supporting documents, only if you provide them (entry on the transport register, public liability and goods in transit insurance certificates, copy of your Community licence): their validity date, their review by our team and the reason for any rejection. None is required.
Copy of your driving licence, only if you offer driven delivery: the file, its expiry date if your licence has one, its review by our team and the reason for any rejection. Our team checks that it is a valid category B licence, in your name, obtained at least 3 years ago. It is not required to approve your account: without it, your driven delivery offers receive no requests. It is not read by any automated tool and is never shown to customers.
Your equipment, spaces, payload, departments served, your one-off and regular journeys, and your driven delivery availability (departure city, radius, dates).
Your PayPal.me link, if you give it: it is only shown to the customer who booked you, with your contact details, so that they can pay you directly.
Your quotes (price, VAT, date, conditions), your messages, the reason for a cancellation, your collection and delivery photos, your responses to reports, your reviews, and your statistics (jobs completed, cancellations, average rating).
Your “Not interested” responses to matching requests and their reason, which is optional.
The date on which you accepted the terms and conditions.
You are a carrier: automatic verification
Public sources. When you register, and regularly afterwards, our server looks up your business, by its SIRET or SIREN number, in the French business directory (Sirene, through the French State’s Recherche d’entreprises API), in the register of goods transport undertakings of the French ministry responsible for transport and in the insolvency proceedings notices of the BODACC. We keep the result of each check: status of the business, match of the registered company name, date of creation, activity, transport licences, published proceedings (nature and date of the judgment). We do not record the directors or the persons named in the judgments; from the register, we copy only the numbers and validity dates of the licences, without any name or address.
Company established abroad. If your company is established in a country served, outside France, our server does not consult Sirene, the transport register or the BODACC: it looks up your EU VAT number in VIES, the VAT information exchange system of the European Commission, which indicates whether the number is valid and, depending on the country, the registered company name and address. We keep the validity of the number, the published company name and whether it matches the one you declared; the address is neither read nor kept. Your activity, the age of your company and any insolvency proceedings are not checked. If your country is not covered by VIES (Switzerland, United Kingdom, Andorra), our team checks your company registration number itself.
Reading of your insurance certificates. If you provide them, the file of your public liability and goods in transit insurance certificates is read automatically by Anthropic (Claude API), which extracts the insurer, the policy number, the name and SIREN number of the insured, the validity dates, the cover, the limit of the goods cover and any inconsistencies. Only the file is sent to it, without any other data from your carrier file. We keep this information and its comparison with your carrier file.
Who decides. The check of your business alone decides on the approval of your account when it is fully compliant: business and establishment active in Sirene, registered company name public and matching, transport, breakdown recovery or motor trade activity, business created at least 90 days ago, no recent insolvency proceedings in the BODACC, no other carrier account linked to the same business (SIREN), and a file never rejected or suspended by our team. For a company established abroad, these conditions are: VAT number valid in VIES, company name published by VIES and matching, no other carrier account with the same VAT number, and a file never rejected or suspended by our team (VIES does not publish the company name for all countries, does not cover Switzerland, the United Kingdom or Andorra, and a Monegasque company, whose VAT number has the French format, is always reviewed by our team). Your account is then approved automatically, without review by our team; our team is notified the next day. Otherwise, our team reviews your file and decides whether to approve or reject it: no account is rejected or suspended automatically (see the ). The reading of your certificates decides nothing: our team reviews them.
You are a private individual who transports goods on your journeys
Your first name and surname, your email address and the date on which you accepted the terms and conditions. You do not have to give a SIRET number or a company name.
Your mobile number, verified by text message. The number you give is first checked (French mobile line, not a virtual number), then you receive a code by text message to enter on the site. We keep the verified number and the date of its verification: the same number can only be used for one account, and once your account is approved, you change it by writing to support. Purpose: to combat fake accounts and multiple accounts.
Your profile photo, which is mandatory for a private individual: you can replace it, but not remove it.
Your journeys (one-off, in France) and the space you have available, your quotes (amount requested, date, conditions), your messages, your collection and delivery photos, your reviews and your statistics, as for a professional carrier.
Your account is approved without prior review as soon as your mobile number is verified and your photo is added; our team is notified and then reviews your file. No account is rejected or suspended automatically.
You are the author of a listing imported by our team
This data does not come from you: our team collects it by hand from a listing that you published elsewhere (Facebook group, classified ads site).
The source and date of the listing, its text and the information taken from it (places, dates, vehicle).
Numbers, email addresses and links are masked before any processing; first names and surnames are replaced with “[prénom]” just after the automated reading. We keep neither your name nor your contact details.
Our team sends you an invitation link itself: we keep only a hash of it. If you confirm, we record your email address and the date of your agreement, then the data of a request (above).
You are a member of our team
Your email address, your role, and a record of your decisions (review of a supporting document, approval of a carrier, import of a listing, closure of a report), with your internal notes, which are never shown to customers or carriers.
Your account: password or sign-in with Google
With your email address: your address, confirmed by the link we send you, then the password you choose afterwards. The password passes through our server when you enter it, without ever being stored or logged there; our service provider Supabase keeps only a fingerprint of it (hash), from which the password cannot be recovered: no one, not even our team, can read it.
With Google (“Continue with Google”, if you choose it): after you choose your account in Google’s window, Google sends your browser a signed token containing your email address, your name, your profile photo and your Google identifier; our server has it verified by our service provider Supabase. This data is used to create and secure your account; the site uses only the email address, and displays neither your name nor your Google photo. We never receive your Google password, nor any access to your other Google data (emails, contacts, calendar).
Request being published: while you create your account, the request you have just filled in is linked to your browser by a technical cookie (see “Cookies and trackers”); only a hash of this cookie is kept with the request, and it is deleted when the request is published.
Your profile photo
Only if you add one, as a customer or a carrier (it is mandatory for a private individual who transports goods): the photo you choose on the site (your Google photo is not used). It is cropped to a square and saved again in your browser before it is sent, which removes the device information, including the GPS location, and the file name.
You can change or remove it at any time from your account (a private individual who transports goods can only replace it); without a photo, a default avatar is shown.
Your notifications on your phone
Only if you turn them on from your account: the technical address that your browser assigns to this phone to receive notifications, and the keys used to encrypt them, linked to your account.
Each notification repeats the subject and summary of the email it accompanies (new matching request, quote, message, booking, transport stage) and the page to open: never your contact details, your address or the text of a message. It may appear on your phone’s lock screen.
You can turn them off at any time from your account or in your phone’s settings; they are also turned off when you sign out on this phone.
Your text messages
If the telephone number registered on your account (for a private individual who transports goods, their verified mobile number) is a French mobile number (06 or 07) or a mobile number from a country served where text messages are available, we use it to notify you by text message of the most important events, in addition to the email: a new quote, quotes awaiting your choice, journeys matching your request, the first message from each carrier (without its text) and the notice that your unanswered request will be removed if you are a customer; a new request matching your journeys if you are a carrier. If you leave an urgent request unpublished, you also receive, once, at the mobile number entered in the form, a text message with the link to publish it. Other numbers receive no text messages.
A mobile number (06 or 07) is requested with each request and with each journey of a professional carrier. On publication, it becomes your account’s number and replaces the previous one. Exception: a request published through a link received by email and opened in another browser, or through the link in a reminder about an unpublished request; its mobile number then does not replace the account’s number. A customer abroad can give their number with its country code: they only receive text messages if it is a mobile number from a country served where text messages are available.
Each text message repeats the essentials of the email (depending on the case, price of a quote, towns or cities of the journey, date, goods to be transported) and a short link to the request page, which gives access to nothing without signing in to the account concerned. Exception: the link in the reminder about an unpublished urgent request shows, without signing in, the summary of that request (journey, goods, date) and lets you request the account creation email, sent to the address entered. It never includes your contact details, your exact address, a customer’s name or the text of a message. It may appear on your phone’s lock screen.
Text messages are turned on by default. You can turn them off at any time in your profile, and turn them back on. You receive at most 10 text messages per day. No text message is sent between 21:30 and 08:00 (Paris time): it is sent the next morning if it is still relevant, otherwise it is not sent.
The sending log keeps the text of each text message and its sending status (sent, postponed, not sent and why, rejected by the provider), with the email it accompanies. Your number is not in it: it is read from your account, or from the unpublished request, at the time of sending. Only a hash of the number, computed with a secret server key, is kept with the sending status, to limit the number of text messages sent to the same number.
For all visitors
Cookies: sign-in cookies, only if you sign in, create an account or request a new password, and a technical cookie while the account that publishes a request is being created (see “Cookies and trackers”).
Anti-abuse counters. To limit abusive submissions of public forms (publishing a request, creating an account, signing in with a password, “forgotten password” email, carrier registration, browser error reporting) and repeated searches (towns and addresses suggested while you type, site search), we count submissions and searches per hour and per IP address and, for sign-in, also per email address entered. Sending and checking a text message code are also counted per IP address, per account and for the site as a whole. Neither the IP address nor the email address is stored: only a hash is kept, computed with a secret server key; an IPv6 address is first reduced to its /64 block. These counters are deleted after 48 hours.
Error log. Server errors are recorded in it only with a fixed context and a code. Browser errors add a short cleaned message, of 120 characters at most, from which email addresses, telephone numbers, identifiers and long numbers are removed. A name or an address may exceptionally remain in it.
Hosting provider logs: IP address, page requested and technical connection information, kept by Vercel (hosting of the site) and by Supabase (sign-in and database).
Audience measurement: pages viewed (without the identifiers, tokens or parameters in their address), referring site, country, type of device, operating system and browser, measured by Vercel (Web Analytics) without cookies or storage in your browser. The back office is not measured.
3. Purposes and legal bases
Create and secure your account (password or sign-in with Google, forgotten password), publish your request and track your requestsLegal basis: performance of the terms and conditions.
Verify carriers before any matching (SIRET checked for each professional, or VAT number in VIES for a company established abroad, automatic approval of a compliant file; insurance and register when provided), and show customers the supporting documents that are approved and validLegal basis: performance of the terms and conditions and legitimate interest (reliability of the service).
Check the driving licence of vehicle delivery drivers before any driven delivery requestLegal basis: performance of the terms and conditions and legitimate interest (reliability of the service).
Verify by text message code the mobile number of private individuals who transport goods on their journeys, and accept only one account per number, to combat fake accountsLegal basis: legitimate interest (security of the service).
Alert matching carriers, pass on quotes and messages, by email and, if you turn them on, by notification on your phone
4. Who sees your data
Before booking, verified carriers with a matching journey see your request without your contact details or your exact address: goods, make and model of the vehicle, what makes loading difficult and your additional details (numbers and email addresses masked), towns or cities, dates, the site access you ticked, whether you are a private individual or a business and, for a business, the country of your company (never its name), with the VAT that the site suggests for their quote, your profile photo if you have added one, and your average rating if you already have reviews. Numbers and email addresses typed in a message are masked. The photos of your request are currently only shown to our team. If you indicate that a journey interests you, its carrier is notified; if you decline a quote, its carrier is notified, with the reason chosen if you give one.
In the site search, as long as your request is open, a summary without any name or contact details is visible to any visitor who searches for requests on a journey: towns of departure and arrival (outside France: the city chosen from our list and its country, otherwise the country alone), dates, goods, condition, number of vehicles and whether a professional is required. Your exact address, the site access, your remark and your photos never appear in it; a request originating from a listing published elsewhere does not appear in it. The most recent open requests may also be shown on the site’s home page, which is open to everyone and read by search engines, with at most the same information.
After booking, your contact details are exchanged with the other party to the booking, and with them alone (see the terms and conditions). The exact addresses you have given are only visible to the carrier you book, from that moment, and to our team; from their job page, the carrier can open each one in Google Maps, which only receives it if they tap that link. Contact details and addresses are no longer displayed after a cancellation and never appear in an email.
You are a carrier: customers who receive your quote see what we have verified, “SIRET verified” (or “Verified company” for a company established abroad) and, only if they are approved and valid, “Liability insurance”, “Goods in transit insurance” and “On the transport register”. Your files are never shown to customers, and the copy of your driving licence no more than the others.
5. Technical service providers and location
Vercel
Company
Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, United States
Role
Hosting of the site, execution of its server functions and audience measurement without cookies (Web Analytics).
Data
Pages requested, IP address and technical connection information (hosting provider logs); for audience measurement, pages viewed without identifiers or parameters, referring site, country, device and browser.
Location
Site functions run in Paris (cdg1 region); company established in the United States.
Supabase
Company
Supabase Pte. Ltd., 65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513
Role
Database, accounts and sign-in (password, sign-in with Google, address confirmation and forgotten password emails) and private file storage (supporting documents, photos).
Data
All the service data described in this policy, including the password, stored only in hashed (unreadable) form.
Location
Data hosted in Paris (Amazon Web Services eu-west-3 region); company established in Singapore.
6. Retention periods
Automatic deletions are carried out by a task that runs once a day: they may take place up to 24 hours after the due date.
Anti-abuse counters for public forms (hash of the IP address, and of the email address entered for the limit on sign-in attempts per account)48 hoursAutomatic deletion
Account created but never confirmed (email address)24 hoursAutomatic deletion
Supporting document sent by a carrier but never saved24 hoursAutomatic deletion
Browser error log14 days after the last occurrenceAutomatic deletion
Server error log90 days after the last occurrenceAutomatic deletion
Log of emails sent by the service, with the text of the text messages that accompany them and the hash of the number (never the number itself)90 daysAutomatic deletion
Listing imported from another site and never published (text and request created)30 days after the import or after the author’s agreement; immediately if the author indicates that the listing is not theirs
7. Security
Each role (customer, carrier, team) only has access to its own data, through access rules enforced by the database itself and tested for each role.
A customer’s contact details and exact address are never readable by a carrier before booking: only the carrier they book and our team can see them.
Supporting documents, including the copy of vehicle delivery drivers’ driving licences, and photos are stored in private spaces, which can only be viewed through temporary links lasting a few minutes, created after a check of access rights; for profile photos, these links last one hour. A profile photo is only saved after a check by our server, which verifies that it is stored in its account’s folder and reads the file again to make sure that it really is an image.
Passwords are never stored in plain text: only their fingerprint (hash) is kept by Supabase. They have at least 12 characters, including an upper-case letter, a lower-case letter, a digit and a special character, and a password known to have been leaked is refused (Supabase compares it with the public Have I Been Pwned list).
Sign-in attempts are limited per IP address and per account, and we never reveal whether an email address has an account.
Collection and delivery photos are stripped of their GPS location before they are sent; profile photos are always saved again in your browser, without the device information.
The data is hosted in Paris; the access keys to services never appear in the site’s code.
A mobile number can only be verified for one account; the sending of text message codes is limited per IP address, per account and for the site as a whole, and virtual numbers are refused.
Notification text messages never contain contact details, and their link gives access to nothing without signing in to the account concerned. Their number is limited per person and per day, and per hour for the site as a whole.
8. Cookies and trackers
The site only uses cookies that are necessary for it to work:
the session cookies (prefix “sb-”, provided by Supabase), set when you sign in with a password or with Google, which keep you signed in and are renewed automatically; when you create an account with your email address or request a new password, cookies with the same prefix, set by Supabase’s sign-in tool, also keep a random verification code;
the pl_brouillon cookie, set when you send a request without being signed in: it links this request to your browser while you create your account, so that it is published with that account. It contains the identifier of the request and a random token, cannot be read by the page’s scripts, and is deleted on publication or at the latest after 24 hours.
the pl_brouillon_lien cookie, set only when you open the link in the email or text message that reminds you of an unpublished request: it links this request to your browser while you sign in, and the request can only be published with the account of the address to which the email was sent. It contains the identifier of the request and a random or signed token, cannot be read by the page’s scripts, and is deleted on publication or at the latest after 24 hours.
the pl_trajet_prepare cookie, set when, having been invited on the basis of your available space listing, you choose to create your carrier account: it retrieves your prepared journey once you have registered, so that you can check and publish it. It contains a random token, cannot be read by the page’s scripts, and is deleted when the journey is published, on sign-out or at the latest after 7 days.
the pl_code cookie, set when you open an invitation link or enter an invitation code while creating your account: it keeps this code while you create your account or sign in, in order to add it to your account. It contains only the code, cannot be read by the page’s scripts, and is deleted as soon as the code is added, on sign-out or at the latest after 30 days.
the pl_devis_demande cookie, set when you choose to create your carrier account in order to send a quote on a request seen in the search: it keeps the identifier of this request (nothing that identifies the customer) to take you back to it once you have registered. It cannot be read by the page’s scripts, and is deleted when the quote is sent, on sign-out or at the latest after 7 days.
9. Your rights
You can request access to your data, its rectification, its erasure, the restriction of its processing or its portability, and object to processing based on legitimate interest. The author of an imported listing can refuse its publication at any time from their invitation link (“This is not me”), or write to us.
To exercise these rights or delete your account, write to us at contact@plateau-libre.com. Some data may have to be kept for our accounting obligations.
If you consider that your rights are not being respected, you can lodge a complaint with the French data protection authority, the Commission nationale de l’informatique et des libertés (CNIL), www.cnil.fr.
10. Changes to this policy
This policy may change as the service evolves; the date of the last update is shown at the top of this page. You will be informed of important changes on the site or by email.
Purposes: to verify carriers before any matching, and then for as long as they are registered; to check the supporting documents provided and show customers those that are approved and valid (“Liability insurance”, “Goods in transit insurance”, “On the transport register”), as trust badges; to check a vehicle delivery driver’s driving licence before any driven delivery request.
Legal basis: performance of the terms and conditions.
Follow the transport (photos, confirmation), publish reviews, handle reportsLegal basis: performance of the terms and conditions and legitimate interest (trust between users).
Import a listing published elsewhere and invite its author; publish it only after their agreementLegal basis: legitimate interest for the invitation, consent for publication.
Protect the service (anti-abuse counters, limit on sign-in attempts, error log)Legal basis: legitimate interest (security).
Measure the service (dashboard indicators, calculated on totals)Legal basis: legitimate interest.
Measure traffic to the site, without cookies, in order to improve itLegal basis: legitimate interest.
Reminders and suggestions by email
In addition to alerts, quotes, messages and booking emails, we send you:
reminders about your current requests, journeys and quotes: matching request still unanswered, customer interested in your journey, journeys matching your request, quotes awaiting your choice, quote not selected, tips for a request that has no quotes yet, last reminder before an unanswered request is removed;
suggestions to publish: first journey, journeys of the week, regular journey, first request, republishing a request, new transport. If a request filled in with your account’s confirmed address has not been published, a suggestion reminds you of it once: its link attaches the request to your browser with a second technical cookie, pl_brouillon_lien (see “Cookies and trackers”), and the request can only be published with that account, after signing in. You receive at most one per week. Each one contains a “Stop receiving these suggestions” link, and a checkbox on the Account page lets you stop or resume them; your choice is recorded with its date.
a single reminder if you filled in a request without finishing creating your account: it is sent to the address entered in the form, with the same link, which lets you create the account for that address in order to publish the request. As there is no account in which to record your choice, it has no unsubscribe link, and no other reminder follows for this request.
Some reminders are also sent as notifications on your phone, if you have turned them on, and the most important ones by text message (quotes awaiting your choice, journeys matching your request, last reminder before an unanswered request is removed: see “Your text messages”); never a suggestion. We do not sell any data and do not pass your email address on to anyone.
You are a private individual who transports goods: customers see your first name and the initial of your surname (for example “Marie D.”), with “Private individual” and “Verified mobile number”; your number is never displayed before booking. Our team sees your full name and your verified mobile number.
Profile photo, if you have added one: a customer’s photo is seen by the carriers who view their request, from the time of the request (above); a carrier’s photo is seen by customers on their quotes, profile, bookings and messages. Our team sees it too and can remove it. It never appears in the site search, on a page accessible without signing in or in an email.
Published reviews: visible to the person rated and, for a carrier, to the customers who receive their quote. They are displayed with the towns of the journey and the type of customer.
Our team, in the back office: requests (including exact addresses), supporting documents, photos, reports and the email log, as needed.
Our technical service providers, only for their part of the service (next section).
Google, only if you choose “Continue with Google”: Google then knows that you sign in to Plateau Libre (next section). It receives nothing about your requests or your transports.
Anthropic (Claude API)
Company
Anthropic Ireland, Limited
Role
Automated reading of a listing imported by our team, to prefill its fields; reading of the insurance certificates uploaded by carriers, to help our team verify them.
Data
Text of the listing, after numbers, email addresses and links have been masked. It may still contain a first name or surname, which is removed just after the reading. File of a carrier’s insurance certificate (insurer, insured, policy number, dates, cover).
Location
Company established in Ireland.
Resend
Company
Plus Five Five, Inc.
Role
Sending of the service’s emails (alerts, quotes, booking, reminders) and, on behalf of Supabase, of account emails (address confirmation, forgotten password).
Data
Email address of the recipient and content of the email, which never contains the other party’s contact details.
Location
Data processed in the United States, according to its privacy policy.
Twilio
Company
Twilio Inc.
Role
Verification of the mobile number of private individuals who transport goods on their journey: check that the number is a mobile line and not a virtual number, sending of the code by text message and check of the code entered. Sending of notification text messages for important events: new quote, quotes awaiting a choice, journeys matching a request, request matching a journey.
Data
For verification: mobile number entered, code sent by text message and result of the verification, line type of the number. For notification text messages: mobile number of the recipient and text of the message (price of a quote, towns or cities of the journey, date, goods to be transported, link to the request page), without contact details. No other data from the account or the transports.
Location
Company established in the United States; framework for the transfer outside the European Union to be confirmed.
Sign-in with Google
Google is not a service provider chosen by Plateau Libre: it only acts as the provider of your identity if you choose “Continue with Google”. Its button is, however, loaded from Google’s servers as soon as the sign-in and account creation pages are displayed (see “Cookies and trackers”).
Google (sign-in with Google)
Company
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Role
Provides the “Continue with Google” button and confirms your identity when you choose it, to create your account or sign you in.
Data
After you choose your account in Google’s window, Google sends your browser a signed token containing your email address, your name, your profile photo and your Google identifier; our server has it verified by Supabase. As the button is loaded from Google’s servers as soon as the sign-in and account creation pages are displayed, Google also receives, before any click, your IP address and the technical information of your browser. Google knows that you sign in to Plateau Libre; it receives no data about your requests or your transports.
Location
Company established in Ireland; processing subject to the Google Privacy Policy.
Emails relating to your account (confirmation of your address, forgotten password) are sent by Supabase, through Resend. Town searches go through our server to the public service geo.api.gouv.fr, without any data that identifies you.
Notifications on your phone
If you turn on notifications, each one is encrypted for your phone and then delivered by your browser’s notification service, which passes it on to the device: Google for Chrome and Android, Apple for Safari on iPhone, iPad and Mac, Mozilla for Firefox, Microsoft for Edge on Windows. This service is not a service provider chosen by Plateau Libre: it is your browser’s own. It cannot read the content of the notification; it receives the technical address of your phone, and the time and size of the sending.
Address suggestions
When you type the exact address of a place in France, our server passes the text typed to the geocoding service of the Géoplateforme, a public service of the IGN, which returns addresses from the Base Adresse Nationale located in the chosen town. Our site does not keep this text: it neither stores nor logs it. Only the address in the field when you send your request is stored, with the request. An address typed for a city abroad is not sent to any service.
IGN Géoplateforme (address suggestions)
Company
Institut national de l’information géographique et forestière (IGN), 73 avenue de Paris, 94165 Saint-Mandé Cedex
Role
Suggests addresses from the Base Adresse Nationale while you type the exact collection or delivery address of a request in France.
Data
The text typed in the address field and the code of the chosen town, sent by our server in the web address of the query (the service only works this way): not your IP address, your name or any other data from your request or your account.
Location
Public body established in France.
Carrier verification
Anthropic (Claude API) also reads the insurance certificates uploaded by carriers: it receives the certificate file, without any other data from the carrier file. It never receives the copy of a vehicle delivery driver’s driving licence or of a Community licence, which only our team reviews. Carrier checks go through our server to public services: the Recherche d’entreprises API (Sirene) and the BODACC API receive only the SIRET or SIREN number searched for; the register of goods transport undertakings is downloaded in full, without any data being sent to it. For a company established abroad, VIES (European Commission) receives only the VAT number searched for; it returns its validity and, depending on the country, the registered company name and address, of which we keep only the company name.
Mobile number verification and text messages
When a private individual has their mobile number verified, our server passes the number to Twilio, which checks the line type (virtual numbers are rejected), sends the code by text message and checks the code entered. For the text messages that notify you of a new quote, a matching request or another important event (see “Your text messages”), our server passes your mobile number and the text of the message to Twilio. No other account data is passed on to it. Twilio is a company established in the United States: the framework for this transfer outside the European Union is to be confirmed.
Automatic deletion
Files of completed transports (booking and quote selected)Statutory retention period for accounting documentsNot yet applied automatically
Accounts, requests, quotes, messages, photos, reviews, reports and carriers’ supporting documentsPeriod to be definedNo period set to date
The copy of a vehicle delivery driver’s driving licence is kept like their other supporting documents.
The exact address and the site access of a request are kept for as long as the request itself.
Your profile photo is kept until you change or remove it, or until your account is deleted. A photo that is replaced or removed, by you or by our team, is deleted immediately. When the account is deleted, or if that deletion fails, the daily task deletes photos that no account uses and that are more than 24 hours old.
A phone’s subscription to notifications is kept until you turn them off or sign out on that phone, until your browser’s service tells us that it no longer exists (notifications turned off in the settings, app removed), or until your account is deleted. The first name, surname and verified mobile number of a private individual who transports goods are kept like the other data of their account.
The text of a text message and its sending status are kept with the email it accompanies, for as long as the email log (above), with the hash of your number but never the number itself. Your choice to receive text messages or not is kept like the other data of your account.
the pl_langue cookie, set when you choose a language on the site or in your profile: it remembers this choice for your next visits on this device. It contains only the language code and is deleted at the latest after 365 days.
If you have not chosen a language, public pages are displayed in the language of your country, which our hosting provider infers from your IP address; in a country with several languages, your browser’s language decides. The site keeps no record of this step.
No audience measurement, advertising or social network cookies. Vercel’s audience measurement (see “Data collected depending on how you use the site”) sets no cookie and uses no storage in your browser.
On the sign-in and account creation pages, the “Continue with Google” button is provided by Google and loaded from its servers as soon as the page is displayed, before any click: Google then receives your IP address and the technical information of your browser, and can read its own cookies if you are signed in to a Google account (for example to show your name on the button). Google’s script also stores, as soon as the page is displayed, a g_state cookie on the site’s domain (duration: about six months), whose content is defined by Google; the site does not use it.
So that the site can be installed as an app, your browser stores a small program from the site (a “service worker”): it displays a “No connection” screen when your phone has no network and, if you have turned them on, the notifications. It keeps no pages and no personal data. When a page reloads to move to a new version of the site, the number of that version is kept for the duration of your visit: it says nothing about you.
If you turn on notifications, your browser keeps the subscription of this phone, and the site records in it the date of its last update, in order to refresh it at most once a day. If you tap “Later” on the invitation to turn them on, the site records the date of that choice in it, so as not to offer it again for a few days.
On a phone, if you tap “Later” on the invitation to install the app, or if you install it, the site records the date of that choice in your browser, so as not to offer it to you again (or not for a few days).
No other storage in your browser apart from these cookies and Google’s cookie above.
The font is served by the site itself, and the map is drawn without any online map provider.
As these cookies are necessary for the service you request (signing in, publishing your request with your account, remembering your chosen language), no consent banner is displayed.