Privacy policy
Last updated: 23 September 2026
This is a translation provided for information; the French version is authoritative.
Kargit compares the cost of your electric vehicle trips. To do this, we process some personal data; this page explains which data, why, how long we keep it, and how to exercise your rights (under the GDPR and the French Data Protection Act, known as the ‘Informatique et Libertés’ law).
1. Who is responsible for your data?
The data controller is , an individual entrepreneur (entrepreneur individuel, EI) trading as OanDev (SIRET 130 585 615 00011), publisher of the Kargit website.
For any question about your data: contact form or contact@kargit.fr.
2. What data, why, and for how long?
You can use Kargit without creating an account: your trips then stay on your device. An account is only needed to access your preferences and favourite trips on all your devices.
| Data | What it is used for | Legal basis | Retention period |
|---|---|---|---|
| Account: email address, username / first name, password (stored only in irreversibly encrypted form), provider identifier if you sign in via Google or Facebook. | Creating and securing your account, signing you in, resetting your password. | Performance of the service you requested (Art. 6(1)(b) GDPR). | Until your account is deleted (‘Delete my account’ button in My profile). |
| Profile and preferences: vehicle, home / work addresses, calculation settings (battery, weather, consumption…), subscriptions you hold, excluded operators, favourite trips. | Personalising calculations and pre-filling your searches. | Performance of the service you requested (Art. 6(1)(b)). | Until your account is deleted. |
| Newsletter and partner offers: your email address and your choices. | Sending you our news and, if you have agreed to it, partner offers. | Your consent (Art. 6(1)(a)), which you can withdraw at any time in My profile or in each message. | Until consent is withdrawn, and at most 3 years without any interaction on your part. |
| Trip calculations: departure, arrival and stopover addresses, options chosen, vehicle (with no direct link to your identity for visitors without an account). | Calculating routes, charging stops and costs; monitoring use of the service in order to improve it and detect anomalies. | Performance of the service you requested (Art. 6(1)(b)) and legitimate interest in improving and securing the service (Art. 6(1)(f)). | 12 months, then automatic deletion. |
| Contact messages: name, email address, message content, irreversible hash of the IP address. | Replying to you; limiting spam (the IP address is never stored in plain form). | Legitimate interest in responding to requests and protecting the form (Art. 6(1)(f)). | 12 months, then automatic deletion. |
| Technical data: IP address, date and time, pages requested (server logs). | Security, abuse prevention, fault diagnosis. | Legitimate interest in security (Art. 6(1)(f)) and the hosting provider's legal obligations. | 12 months maximum. |
| Audience measurement: device, browser, operating system, language, referring site, pages viewed, duration, a few actions; NOT your IP address or the technical details of your browser, you being recognised only by a single-use fingerprint valid for one day (see legal notice). | Knowing how many people use Kargit and how, in order to improve it. | Legitimate interest (Art. 6(1)(f)), under the consent exemption for audience measurement (recommendations of the CNIL, the French data protection authority). You can object at any time. | 13 months for details, then daily statistics only, with no time limit. |
Fields marked as mandatory in forms are necessary for the service; without them, the function concerned (creating an account, sending a message) cannot be provided. All other information is optional.
3. Who receives your data?
Your data is intended for the publisher of Kargit and its technical service providers, only to the extent necessary:
- Hosting provider: OVH SAS, 2 rue Kellermann, 59100 Roubaix, France.
- Sending emails (password reset, replies to your messages, newsletter): OVH SAS (same hosting provider, professional email service).
- Sign-in via a provider (Google, Facebook), only if you choose to: the provider sends us your email address, your name and an identifier, and knows that you have signed in to Kargit. Its own privacy policy applies.
- Mapping and address search services, called from your browser when you enter an address or view the map: IGN Géoplateforme (data.geopf.fr, France), Photon / Komoot (photon.komoot.io, Germany), Nominatim and base maps from the OpenStreetMap Foundation (United Kingdom). They receive the text of the address you enter and your IP address, not your identity.
- Route calculation: performed by our own servers (open-source engines OpenRouteService and GraphHopper); failing that, by the public OSRM service.
- Technical resources for the interface (map library, fonts): hosted on Kargit; no third-party server is called to load them.
- Audience measurement: handled entirely by our own servers; no data is passed on to any third-party service.
No data is sold or transferred to advertisers. If you have accepted ‘partner offers’, we may send you their offers ourselves; your email address is not passed on to partners.
4. Cookies and local storage
Kargit only uses elements that are strictly necessary for the service you request, which do not require your consent (CNIL recommendations) — which is why there is no cookie banner:
- Session cookie (
kargit_session): keeps you signed in. Inaccessible to scripts (HttpOnly), 30 days at most if you stay signed in, otherwise deleted when you close your browser. - Provider sign-in cookie: secures the return from Google / Facebook, deleted after 10 minutes.
- Browser local storage: your current trips, your custom vehicle and your settings, kept on your device so that you find them again when you come back. They are not sent to Kargit as long as you are not signed in and do not save them.
- Opting out of audience measurement: if you click ‘Disable audience measurement’ (legal notice), a marker (
kargit_no_stats) is placed on your device to remember your choice; apart from this, nothing is stored on your device for the audience measurement itself.
You can delete this data at any time from your browser settings; you will then be signed out, your unsaved trips will be lost, and your objection to audience measurement will be forgotten. If we ever add an advertising tracker or any other non-essential tool, we will ask for your consent first.
If you use ‘my location’ on the charging stations page, your device's location is read by your browser with your permission, and is used only to centre the map.
On Kargit's sites for other countries, your IP address is used only to guess your country so that we can suggest the right site. It is neither recorded nor stored, and no cookie is set.
5. Transfers outside the European Union
Some of the services listed above are located outside the European Union: the OpenStreetMap Foundation (United Kingdom, a country recognised by the European Commission as providing an adequate level of protection) and, only if you choose to sign in with them, Google or Facebook (United States, companies participating in the EU-US Data Privacy Framework or covered by standard contractual clauses). Our hosting provider and our email service provider (OVH, for both) are located in France.
6. Security
- Passwords are stored in irreversibly encrypted form (bcrypt): we cannot read them.
- The session cookie is protected against being read by scripts and against being sent from third-party sites.
- In our forms, the IP address is only stored as an irreversible hash.
- Access to data is restricted to authenticated administrators, via an encrypted connection (HTTPS) across the whole site.
In the event of a data breach posing a risk to you, we will inform you and the CNIL, under the conditions laid down by law.
7. Your rights
You have the following rights over your data: access, rectification, erasure, restriction, objection (in particular to direct marketing), portability (receiving your data in a commonly used format), and the right to withdraw your consent at any time, without affecting what was done before. You can also set instructions regarding what happens to your data after your death.
- Directly in the app: edit your information, your preferences and your communication subscriptions (My profile), delete your favourite trips, or delete your account (My profile → Delete my account; for details of what is erased and what is kept, and what to do if you can no longer sign in: delete your data).
- On request: for any other right (access, a copy of your data, objection…), write to us via the contact form. We reply within one month. We may ask you to prove your identity if there is any doubt.
- Complaint: if you believe that your rights are not being respected, you can lodge a complaint with the CNIL — www.cnil.fr/fr/plaintes — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.
8. Other information
Minors
Kargit is not intended for children under 15; below that age, creating an account requires the consent of a parent or legal guardian.
Changes
We may update this policy, for example if we add a feature that processes new data. The date of the last update appears at the top of this page; in the event of a significant change, we will inform you in the app or by email.
Legal notice and terms of use
The full identity of the publisher and the hosting provider, as well as the rules for using the service, are set out in the site's legal notice.