Privacy policy
Last updated: 4 September 2026
This English version is provided for convenience. In case of any difference, the French version prevails.
1. Data controller
The data controller is the company TVMG (SAS), SIREN 108 651 852, whose registered office is at 47 impasse des Égargues, 74410 Saint-Eustache, France.
Contact: contact@sisyf.com
2. Data collected
Sisyf collects the following data:
- Identification data: email address, user ID, first and last name if provided. Collected when the account is created. The email address may also be used to occasionally inform you about changes to the service (see section 3).
- Connection data: date of last login, authentication method.
- Content you create: race plans, imported GPX tracks, segments, aid station strategies, training settings.
- Technical data: server logs (IP address, browser, page viewed) generated automatically for security and operational reasons.
No audience measurement, advertising profiling or third-party tracking tool is used.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Creating and managing the account | Performance of the relationship with the user |
| Saving and giving back your race plans | Performance of the relationship with the user |
| Security of the service, fraud prevention | Legitimate interest |
| Occasionally informing users about changes to the service (new features, important changes, planned end of features) | Legitimate interest |
| Answering support requests sent by email | Legitimate interest / consent |
4. Retention period
- Account and content: kept as long as the account is active. Deleted within 30 days of a request to delete the account.
- Technical logs: kept for 12 months at most.
- Support emails: kept for 3 years after the last exchange.
5. Recipients and subcontractors
The data is never sold or transferred to third parties for commercial purposes. It may be processed by the following technical subcontractors, strictly necessary for the service to work:
- Clerk, Inc. - authentication and user account management (United States). Member of the EU–US Data Privacy Framework.
- Vercel, Inc. - hosting of the Site (United States / EU). Member of the EU–US Data Privacy Framework.
- Heroku (Salesforce, Inc.) - hosting of the application backend and storage of user content (United States). Member of the EU–US Data Privacy Framework.
- Cloudflare, Inc. - content delivery network, protection against attacks and anti-bot filtering (United States). Member of the EU–US Data Privacy Framework.
- Better Stack s.r.o. - observability and technical logging (Czech Republic, European Union).
6. Transfers outside the European Union
As some subcontractors (Clerk, Vercel, Heroku, Cloudflare) are based in the United States, your data may be transferred outside the European Union. These transfers are governed by the EU–US Data Privacy Framework or, failing that, by the European Commission's standard contractual clauses.
7. Your rights
Under the General Data Protection Regulation (GDPR) and the French « Informatique et Libertés » law, you have the following rights over your data:
- right of access
- right to rectification
- right to erasure
- right to restriction of processing
- right to object
- right to data portability
- right to set instructions about what happens to your data after your death
To exercise these rights, write to contact@sisyf.com. You will receive an answer within one month at most.
You can object at any time to the information emails about changes to the service by clicking the unsubscribe link in each of these emails, or by writing to contact@sisyf.com. Unsubscribing will not stop you receiving the emails strictly necessary for the service to work (account confirmation, password reset, security alerts).
If, after contacting us, you believe your rights are not respected, you can file a complaint with the CNIL (the French data protection authority): cnil.fr.
8. Cookies
The Site only uses cookies that are strictly necessary for it to work, exempt from consent under the ePrivacy directive and the CNIL guidelines:
- Authentication cookies (Clerk): keep you signed in to your account.
- Security cookies (Cloudflare): anti-bot and anti-DDoS protection of the Site.
No audience measurement, advertising or third-party tracking cookie is set.
9. Security
The data is stored on secure servers. Communications between your browser and the Site are encrypted (HTTPS). The publisher's access to the data is limited to what is strictly necessary for the service to work and for support.
10. Changes
This policy may change. Any substantial change will be announced on the Site or by email.