Privacy Policy

Personal data collected on the 2ROUE site is processed by the editor, whose details appear in the Legal Notice.

In accordance with the GDPR minimization principle, we only collect data necessary for specific purposes:

• For account creation and management: Email address and username. On the mobile application, registration and login can be done securely via "Apple Sign-In" or via traditional email (Firebase). This processing is necessary for the execution of the contract (our ToU) that you accept when registering.
• For gamification functionality: Your score (XP), badges, and Team membership. These data are processed for execution of the contract and interactive service provision.
• For user guidance (Mobile Application): Real-time GPS location data (and potentially in the background). These data are strictly necessary for the service and are not resold.
• For site security and maintenance: IP address, technical logs, and session identifier (`__session` cookie). This processing relies on our legitimate interest in ensuring service integrity and availability. We consider this processing necessary for the security of our service and fraud prevention.
• For personalized advertising: Navigation data and interaction with ads, via cookies like `__gads` or mobile advertising identifiers. This processing is based on your express consent, which you can manage via our cookie banner or the mobile consent prompt (UMP).

Your data may be transmitted to our technical subcontractors for the needs of the above services:

• Google Firebase (hosting, authentication, Firestore database).
• Vercel Inc. (Next.js frontend platform hosting).
• Google AdSense (for Web) and Google AdMob (for Mobile Application), as advertising networks.

We require all our subcontractors to guarantee an adequate level of data protection, in accordance with GDPR.

Some of our subcontractors, notably Google, may transfer data to countries outside the European Economic Area (EEA), specifically the USA. These transfers are framed by the European Commission's Standard Contractual Clauses (SCC), guaranteeing a sufficient level of protection. You can consult Google's data protection commitments on their site.

In accordance with GDPR, you have the following rights over your data: right of access, rectification, erasure, restriction, portability, and objection. This processing is also carried out in compliance with Moroccan Law 09-08 on the protection of personal data. To exercise them, contact us at: admin@2roue.com.

If you believe, after contacting us, that your rights are not respected, you can lodge a complaint with the competent authority in your country of residence.

Our site and mobile application use Google's advertising services (AdSense for web, AdMob for mobile). In accordance with Google's requirements and GDPR, we inform you that:

• Third-party vendors, including Google, use cookies (on web) and device advertising identifiers (such as IDFA on iOS and AAID on Android, on mobile) to serve ads based on your prior visits and interactions.
• On the mobile application, consent is collected transparently via Google's UMP (User Messaging Platform) SDK, in compliance with GDPR.
• Through these technologies, Google and its partners adapt the ads shown to you based on your navigation or application usage.
• Users may opt out of personalized advertising by visiting Google Ad Settings. You can also consult Google's Privacy Policy for more information.