Privacy Policy

Last updated: 8 novembre 2025

At MillyWay, we take the protection of your personal data very seriously. This policy explains how we collect, use, and protect your information, in accordance with Quebec's Act 25 on the protection of personal information.

Data Controller

Richard Beuzelin

Entreprise individuelle

Quebec, Canada

Email: contact@millyway.com

Personal Data Collected

When you use MillyWay, we collect the following information:

Account Information

Email address: used to create your account and contact you
Password: stored securely (hashed) to protect your account
Geographic location: stored in local storage on the user's device, never on our servers
Images: Profile photos (optional) and photos of offered resources, hosted on Google Cloud Storage

Usage Information

Navigation data: collected via Google Analytics (pages visited, visit duration, device used)
Analytics cookies: used only for Google Analytics

Exchange Information

Offered resources: descriptions, photos, and quantities you publish
Match history: sealed and completed exchanges
Signature initials: when sealing a match

Purpose of Collection

We use your data only to:

Create and manage your user account
Facilitate exchanges between users
Improve our services (via Google Analytics)
Contact you if necessary regarding your account or our services
Comply with our legal obligations

Legal Basis for Processing

We process your data based on the following:

Your consent when creating your account
Contract execution to provide our exchange services
Legitimate interest to improve our platform

Data Hosting and Location

IMPORTANT:

Your personal data is hosted on servers located in US, managed by:

Heroku (Salesforce) - for the database
Google Cloud Storage - for photos
Vercel Inc. - for website hosting

By using MillyWay, you consent to your data being transferred and stored in By using {company}, you consent to your data being transferred and stored in {location}. We ensure that these providers comply with appropriate security standards.. We ensure that these providers comply with appropriate security standards.

Data Sharing

We never sell your personal data.

Your information may be shared only in the following cases:

Between users: your name, location, and offered resources are visible to other users to facilitate exchanges
Service providers: Google Analytics, Heroku, Google Cloud Storage (only for the technical operation of the site)
Legal obligations: if required by law or a competent authority

Retention Period

We retain your personal data:

While your account is active: unlimited retention
After account deletion: complete deletion of your data within 30 days

Your Rights

In accordance with Quebec's Act 25, you have the following rights:

Right of Access

You can request a copy of all data we hold about you.

Right of Rectification

You can correct your personal information directly in your profile or contact us.

Right to Deletion

You can request the complete deletion of your account and data by contacting us at: contact@millyway.com

Right to Portability

You can request to receive your data in a structured, machine-readable format.

Right to Object

MillyWay does not use any data for marketing purposes.

Right to Withdraw Consent

You can withdraw your consent at any time by deleting your account.

To exercise these rights, contact us at: contact@millyway.com We will respond within a maximum of 30 days.

Data Security

We implement the following security measures:

HTTPS encryption: all communications are secured
Hashed passwords: your passwords are never stored in plain text
Restricted access: only authorized persons can access the data
Regular backups: to prevent data loss

However, no system is completely infallible. We recommend using a strong and unique password.

Cookies and Tracking Technologies

MillyWay only uses Google Analytics to understand how users navigate the site.

What are cookies?

Cookies are small text files stored on your device.

Cookies Used

Google Analytics: traffic analysis and user behavior (third-party cookies)

Cookie Management

You can disable cookies in your browser settings. This may affect certain site features.

Changes to This Policy

We may update this privacy policy occasionally. The last update date is indicated at the top of this page.

In case of significant changes, we will inform you by email or via a notification on the site.

Security Incidents

In the event of a data breach that may pose a risk to your rights, we commit to:

Notify you within 72 hours of discovering the incident
Inform competent authorities if necessary
Take appropriate corrective measures

Minors

Persons under 16 years old may use MillyWay, but must:

Obtain consent from their parents or legal guardians
Be accompanied during in-person exchanges

Contact

For any questions regarding this privacy policy or to exercise your rights:

Email: contact@millyway.com

Responsible: Richard Beuzelin

If you believe your rights are not being respected, you can file a complaint with the Quebec Access to Information Commission: www.cai.gouv.qc.ca

By using MillyWay, you accept this privacy policy.