Privacy policy

1.Data controller

Kharita publishes and operates this portal and decides on the processing described here. For any question about your data, write to [email protected].

2.Data we collect

Browsing the catalogue and downloading a file require no account. We collect:

• Account: your email address, a name if you provide one, and the creation date. The address is used to send you your sign-in link.
• Downloads: the dataset, the file, the date, and your account if you are signed in. No IP address is recorded in this log.
• Comments and requests: their content, date and author.
• Rita assistant: for signed-in accounts, the questions asked and the answers produced, in order to monitor service quality and quota use.
• Audience measurement: view counts for dataset pages and articles, as aggregate counters tied to no individual.
• Email preferences: the categories of message you agree to receive, and any unsubscribe.

3.Cookies and audience measurement

The site uses three kinds of tracker:

• A session cookie, strictly necessary: it keeps you signed in. Without it, authentication does not work.
• Google Analytics, which measures traffic and sets its own cookies. The information generated, including your IP address, is transmitted to Google. You can block it with a browser extension or the “Do Not Track” setting offered by some browsers.
• Your browser's local storage, which keeps display preferences — map position, open panels, form drafts. This information never leaves your device.

4.Recipients and processors

We sell no data and share it only with the providers needed to run the service:

• Cloudflare R2 — hosting of data files and media.
• Google Analytics — audience measurement.
• Esri — basemaps. Your browser loads tiles directly from their servers, which therefore see your IP address.
• OpenAI — processing of questions put to the Rita assistant, and translation assistance for metadata on the administration side.
• Our email delivery provider — sending sign-in links and notifications.
• Place search goes through our servers before querying Nominatim (OpenStreetMap): your IP address is not passed to that service.

5.Retention periods

We keep:

• Account data, for as long as the account exists; it is deleted at your request.
• The download log, without a time limit, because it feeds the public counters of the catalogue — it contains no IP address and no browsing identifier.
• Comments, until deleted by you or by moderation.
• Exchanges with Rita, for as long as needed to monitor quality and quotas.
• Data held by Google Analytics, according to that service's own retention periods.

6.Your rights

You may request access to your data, its correction or deletion, or object to a processing operation. You may also withdraw your consent to emails at any time, from your account settings or the unsubscribe link in every message.

Send your request to [email protected]. We reply within a reasonable time and may ask you to confirm your identity where there is doubt. Under Law 09-08 on the protection of individuals with regard to the processing of personal data, you have the right to lodge a complaint with the CNDP.

7.Security

Exchanges with the site are encrypted (HTTPS). Data files are served from private storage through signed, time-limited links rather than permanent public URLs. Access to the administration is restricted and logged.

No system is infallible: should an incident affect your data, we would inform you as quickly as possible.

8.Changes

This policy may change along with the service. The update date appears at the top of the page; in the event of a substantial change, we will inform account holders.