Privacy

Effective date: May 2026

1. Who is the data controller?

The data controller for personal data processed via https://tamilads.fr is TamilAds.fr. For any privacy-related question or to exercise your rights, contact us at eelanet@gmail.com.

2. What data we collect

  • Account data — when you sign in with Google, we receive your name, email address, and Google profile photo URL. We do not see or store your Google password.
  • Listing data — title, description, category, price, optional video link, and uploaded images that you publish on the platform. These are public by design.
  • Technical data — IP address, user-agent string, language preference, and approximate timestamps of requests, kept in standard web server logs and used for security, abuse prevention, and rate limiting.
  • Cookies / session storage — a session cookie to keep you signed in, a CSRF token, and minimal browser storage to remember UI preferences. We do not set tracking cookies of our own.
  • Analytics & advertising (optional) — when enabled in site settings, third-party services such as Google AdSense or Google Analytics may set their own cookies. Their use is governed by their own privacy policies.

3. Image handling

When you upload a photo, the server automatically:

  • checks the file type (JPG, PNG, or WebP only) and size (max 5 MB);
  • resizes it into thumbnail and medium variants for fast loading;
  • re-encodes the file, which strips EXIF metadata — including any GPS coordinates, camera serial number, or capture time embedded by your phone — before the image is stored or shown publicly;
  • auto-rotates portrait photos so they appear upright in shares.

This means location data baked into your phone photos is not published with your listing.

4. Why we process your data (legal bases under GDPR)

  • Performance of the service (Art. 6(1)(b) GDPR) — to let you sign in, post listings, and contact other users.
  • Legitimate interest (Art. 6(1)(f) GDPR) — to keep the platform secure, prevent fraud and abuse, and operate basic logging.
  • Consent (Art. 6(1)(a) GDPR) — for non-essential cookies such as advertising/analytics, where required by your local law.
  • Legal obligation (Art. 6(1)(c) GDPR) — to respond to lawful requests from competent authorities.

5. Retention periods

  • Listings older than approximately 90 days may be automatically removed by a daily cleanup job, together with their images. The current value can be changed by the site operator.
  • Account data is kept for as long as your account is active. If you ask us to delete your account, we remove your profile and detach your remaining listings within a reasonable period, except where retention is required by law.
  • Server logs are kept for a short, rolling period sufficient for security and abuse investigation, then discarded.

6. Who can see your data

  • The public — anything you publish in a listing (title, description, images, video link) is visible to anyone visiting TamilAds, including via search engines.
  • Site operators — staff with administrative access can view all listings and account data for moderation and support.
  • Service providers — Firebase / Google for sign-in, the hosting provider, and (when enabled) Google AdSense or analytics.
  • Authorities — when we are legally required to disclose information in response to a lawful request.

7. AI crawlers and indexing

Public listings on TamilAds are intended to be indexed by general-purpose search engines and AI crawlers (e.g. Googlebot, Bingbot, GPTBot, ClaudeBot, PerplexityBot). Our /robots.txt reflects the current allowlist. Private areas (/admin, /ajax, /uploads/*/thumbs/) are excluded.

8. Your rights under GDPR

You have the right to:

  • access the personal data we hold about you;
  • request correction of inaccurate data;
  • request deletion of your data ("right to be forgotten");
  • object to processing based on legitimate interest;
  • request restriction of processing;
  • request portability of data you provided;
  • withdraw any consent you have given, at any time;
  • lodge a complaint with the French data protection authority (CNIL, cnil.fr) if you believe your rights have not been respected.

To exercise any of these rights, email eelanet@gmail.com. You can delete your own listings directly from your dashboard.

9. International transfers

Some of our service providers (in particular Google) may process data outside the European Economic Area. Where this happens, the transfer is covered by standard contractual clauses or other safeguards approved under GDPR.

10. Security

We use HTTPS for all traffic, hash and salt session tokens, validate uploaded files server-side, apply rate limits to sensitive actions, and rely on prepared statements to protect against injection. No system is perfectly secure — please report any vulnerability you find to eelanet@gmail.com.

11. Children

The service is not directed at children under 15. We do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will remove it.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "Effective date" at the top of this page reflects the most recent change. Material updates will be highlighted where reasonably possible.

13. Contact

For any privacy-related question, write to eelanet@gmail.com or use the contact page.