Privacy Policy

Last updated: August 10, 2026

1. Introduction

ConquerMetroExits (hereinafter referred to as “we,” “us,” or “our”) considers the proper handling and protection of users’ personal information and related data to be an important responsibility in providing Par ici! (hereinafter referred to as the “Service”).

This Privacy Policy explains what information we collect through the Service’s website, web application, and related services, the purposes for which we use it, and how we manage it.

2. Information We Collect and Process

2.1 Email Address

The Service collects and uses users’ email addresses for identity verification, authentication via Magic Link, verification of purchased passes, identity verification when using the Service on another device, and communications necessary for operating the Service.

2.2 Authentication Information

To manage users’ authentication status within the Service, unique identification information may be generated for each user. This information is used to identify users and appropriately manage access to purchased passes.

2.3 Location Information

Only when a user chooses to use a feature that requires their current location, the Service may obtain location information such as latitude and longitude from the user’s device.

Location information is used to provide route searches from the user’s current location and to display nearby Métro stations, exits, entrances, and related information. Users may deny access to location information through their device or browser settings.

2.4 Purchase and Usage Information

If a user purchases a paid pass, we may process information necessary to provide the Service’s paid features, including the type of pass purchased, purchase date and time, payment status, start of the access period, expiration date, and other related information.

We do not directly collect or store full credit card numbers or other complete payment card information. Such information is processed by the relevant payment service provider.

2.5 Technical Information

To ensure the proper operation and security of the Service and to investigate technical issues, service providers may process technical information such as IP addresses, browser and device information, access dates and times, logs, and other related data.

3. Purposes of Using Information

We primarily use the information we collect for the following purposes:

• To provide the Service and its features.
• To verify users’ identities and authenticate access.
• To verify the validity and access period of purchased passes.
• To provide route, station, exit, and related information based on the user’s current location.
• To process payments and manage purchases.
• To prevent unauthorized use, security issues, and abuse of the Service.
• To investigate technical issues and maintain and improve the Service.
• To respond to user inquiries.
• To comply with legal obligations.

4. Legal Basis for Processing Personal Information

In accordance with applicable laws, we process personal information on the basis of the performance of a contract necessary to provide the Service, compliance with legal obligations, our legitimate interests or those of a third party, or, where required, the user’s consent.

For information that requires permission on the user’s device, such as location information, we use such information only when the user has granted permission through their device or browser.

5. Third-Party Services and Data Processing

To provide the Service, we may use third-party services including those listed below. These service providers may process information to the extent necessary to provide their respective services.

• WeWeb: Provision of the web application and user authentication.
• RevenueCat: Management of paid passes and purchase information.
• Stripe: Online payment processing.
• Google Firebase / Firestore: Management of data necessary to provide the Service.

The handling of information by third-party service providers may also be subject to their respective privacy policies and other terms.

RevenueCat may use subprocessors to provide its services, and Stripe may process personal information as either a data controller or data processor depending on the nature of the processing.

6. Disclosure to Third Parties

We do not sell users’ personal information to third parties. When personal information is disclosed or provided to a third party, we do so in accordance with applicable laws and this Privacy Policy, except in the following circumstances:

• When processing is entrusted to a third-party service provider as necessary to provide the Service.
• When the user has given explicit consent.
• When disclosure is lawfully required by law, a court, or another public authority.
• When necessary to protect the rights, property, or safety of us, our users, or third parties.

7. Cookies and Browser Storage Technologies

The Service may use cookies, local storage, and other browser storage technologies to maintain users’ authentication status, ensure the proper operation of the Service, and maintain security.

The way these technologies are used may vary depending on the services or browser specifications involved. Users may be able to manage cookies and other stored information through their browser settings. However, disabling information required by the Service may prevent certain features from functioning properly.

8. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, to provide the Service, comply with legal obligations, resolve disputes, prevent unauthorized use, or meet other legitimate business needs.

When personal information is no longer required, we will delete or anonymize it in accordance with applicable laws and our operational policies.

9. Data Security

Taking into account the nature of the information we handle, the nature of the processing, and the anticipated risks, we implement reasonable and appropriate technical and organizational security measures to prevent unauthorized access, loss, alteration, disclosure, and other improper handling of information.

However, no method of transmission over the Internet or method of electronic storage can be guaranteed to be completely secure.

10. International Data Transfers

Depending on the location of the third-party service providers used by the Service or their data-processing facilities, users’ personal information may be processed in countries outside their country or region of residence.

In such cases, we or the relevant third-party service provider will implement appropriate safeguards in accordance with applicable data protection laws.

11. Users’ Rights

Under applicable data protection laws, users may have the following rights regarding their personal information:

• The right to request access to their personal information.
• The right to request correction of inaccurate personal information.
• The right to request deletion of personal information in certain circumstances.
• The right to request restriction of the processing of personal information.
• The right to object to the processing of personal information.
• The right to data portability in certain circumstances.
• The right to withdraw consent where processing is based on consent.
• The right to lodge a complaint with the competent data protection supervisory authority.

If you wish to exercise any of these rights, please contact us using the contact information provided at the end of this Policy. We may request additional information to the extent necessary to verify your identity.

12. Changes to This Privacy Policy

We may revise this Privacy Policy in response to changes in the Service, technologies used, applicable laws, or other circumstances.

If we make material changes, we will provide notice through the Service or by another appropriate means. The latest version will display the most recent update date at the beginning of this Policy.

ConquerMétroExits

▲ Back to Top