Privacy policy
Last updated: 12 October 2026
FitMyBike is a free tool that matches bicycles to compatible parts. You don’t need an account, and we don’t ask for your name or email to use it. This policy explains the little data that is processed when you visit, why, and your rights under the EU General Data Protection Regulation (GDPR) and the French Data Protection Act.
1. Who is responsible
The data controller is [PUBLISHER NAME], [POSTAL ADDRESS] — contact: contact@usefitmybike.com.
2. What we process, why, and for how long
| Data | Purpose | Legal basis | Kept for |
|---|---|---|---|
| IP address, browser type, page requested, date and time (server logs) | Delivering the website, security, preventing abuse | Legitimate interest (Art. 6(1)(f) GDPR) | Up to 12 months, per our host’s log policy |
| IP address and request details when your browser queries the compatibility database | Returning the bikes and parts you ask for | Legitimate interest — the service can’t work without it | Short technical logs kept by Supabase (see section 3) |
| Your bike selection and shop region | Showing results; remembering your region | Legitimate interest / your request | Region: in your browser until you clear it. Selection: not stored by us. |
| Your cookie choice | Remembering whether you accepted analytics | Legal obligation (proof of consent) | 6 months |
| Pages viewed, bikes searched, device and approximate location (only if you accept) | Audience measurement with Google Analytics | Consent (Art. 6(1)(a) GDPR) | 14 months |
| Your email address and message, if you write to us | Answering you | Legitimate interest | Up to 3 years after our last exchange |
We do not sell your data, build advertising profiles, or make automated decisions about you.
3. Who receives data
- Our web host — [HOSTING PROVIDER] — serves the site.
- Supabase hosts the compatibility database in Frankfurt, Germany. Your browser contacts it directly when you use the matcher. Supabase may access data from outside the EU for support; such transfers are covered by the European Commission’s Standard Contractual Clauses.
- Google (Google Ireland Ltd.) — only if you accept analytics — for Google Analytics. Google may transfer data to the United States; Google LLC is certified under the EU-US Data Privacy Framework.
- Shops (e.g. Amazon, Alltricks, Decathlon, Bike24) — only when you click a shop link. You then leave FitMyBike; the shop’s own privacy and cookie policies apply to everything that happens on its site, including the affiliate tracking that tells it you came from us.
4. Your rights
You can ask to access, correct or delete your data, to restrict or object to its processing, and to receive it in a portable format. You can withdraw consent to analytics at any time with the “Cookie settings” link at the bottom of every page — this doesn’t affect processing done before. You can also give instructions about what happens to your data after your death.
Write to contact@usefitmybike.com. We answer within one month. Because we don’t hold accounts, we may ask for details (date, time, browser) to find data about you.
If you think your rights aren’t respected, you can complain to the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — cnil.fr/fr/plaintes — or to the authority of the EU country where you live.
5. Security
The site is served over HTTPS only. The database is read-only for visitors: the public key embedded in the page can read the catalogue, nothing else.
6. Children
FitMyBike isn’t aimed at children under 15 and doesn’t knowingly collect their data.
7. Changes
We’ll update this page if our processing changes, and show the date at the top. If a change needs your consent again, the cookie banner will reappear.
See also: Cookie policy · Terms of use · Legal notice