Skip to content
MyCritik

Privacy policy

This is an English translation provided for convenience. In the event of any discrepancy, the French version prevails.

Version dated 7 October 2026.

Data controller: GreenRed, SASU (société par actions simplifiée unipersonnelle), 38 rue de la Paix, 91200 Athis-Mons, France. Contact for any question about your data: sylvain@greenred.fr.

Data collected

  • Account: username, email address, password (encrypted), date of birth (optional, for the minimum age), town or city and postcode (optional, for suggestions near you), bio, avatar settings or profile photo, date and version of the terms accepted.
  • Google or Facebook sign-in (if you choose it): your account identifier with the provider, name and email address. We do not receive your contacts, your posts or your password.
  • Contributions: reviews and ratings, photos (EXIF metadata and GPS location are removed on upload; the date the photo was taken is kept), event attendance, notices, private messages, reports.
  • Connections: friends, blocked members, followed artists.
  • Audience measurement (website): pages viewed and actions (reviews posted, sign-ups, clicks on “I’m going”…), measured with Matomo, installed on our own servers. No cookies and no account identifier are used, and IP addresses are truncated; the data is neither shared nor combined with any other processing.
  • Advertising measurement (website, only if you accept it): Google Ads cookies, which show whether a sign-up or a posted review follows a click on a MyCritik advert. No account data (username, email, review content) is passed to Google.
  • Location (app, with your permission): used to suggest events that are on now or nearby. It is sent on a one-off basis for the search, without being stored.
  • Technical: IP address (security, abuse prevention), session cookie. QR code scans are counted using a fingerprint of the IP address that is renewed every day, without keeping the address itself. A review given without an account is stored with an encrypted fingerprint of the IP address, used only to detect abuse.

Some processing takes place only on your phone: the analysis of photos before upload (detection of explicit content; only a score is sent) and reminders to give your review.

Purposes and legal bases

  • Providing the service (account, posting, messaging, artist area): performance of the contract (terms of use).
  • Audience measurement, to find out which pages and features are used and to improve the website: legitimate interest (measurement exempt from consent, in line with the recommendations of the CNIL, the French data protection authority).
  • Measuring the effectiveness of our Google Ads adverts: your consent, which you may withdraw at any time (“Manage cookies”).
  • Moderation, prevention of abuse and harassment: legitimate interest and legal obligations (Digital Services Act).
  • Suggestions of events and of members with similar tastes: legitimate interest. They are calculated from your attendance, reviews, followed artists and town or city, without advertising profiling.
  • Service emails (email address confirmation, forgotten password): performance of the contract. No newsletters or advertising are sent.

Recipients

The data is hosted in France by OVH SAS. It is neither sold nor transferred, and is not used to target you with advertising. It is accessible only to the publisher and, for moderation purposes, to MyCritik’s moderators.

To display certain pages, your browser or the app contacts third-party services directly, which then receive your IP address:

  • DiceBear (avatar generation, from non-identifying parameters);
  • Wikimedia Commons and Ticketmaster (photos of artists and venues);
  • Google or Facebook, only if you use sign-in with these services (their own policies apply);
  • Google Ads, only if you accept advertising cookies (see below; Google’s policy). Google may process this data outside the European Union, under the Data Privacy Framework.

Retention periods

  • Account and contributions: until the account is deleted.
  • Notices: 30 days after publication, then hidden.
  • Reports and moderation decisions: one year after the decision, to meet legal obligations and handle appeals.
  • Technical logs: 12 months maximum.

Your rights

You have the rights of access, rectification, erasure, portability, restriction and objection. From the “My account” page (or “Profile” in the app), you can export your data (JSON file) and delete your account: your reviews, photos, notices and attendance are then deleted and your profile anonymised. For any other request: sylvain@greenred.fr; we reply within one month. You may also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).

Cookies

MyCritik uses strictly necessary cookies (session, protection against request forgery, “remember me” and, for a review given without an account, a random browser identifier that allows it to be edited or deleted); they do not require consent. Audience measurement (Matomo) works without cookies.

Only with your consent, Google Ads sets cookies (for example _gcl_au, for up to 90 days) to measure the sign-ups and reviews that follow our adverts. Until you have responded to the banner, or if you refuse, the Google tag is not loaded. Your choice is stored in your browser for 6 months; you can change it at any time using the “Manage cookies” link at the bottom of the page (or in the Profile tab of the website installed on your phone).