Privacy Policy

Last updated: July 27, 2026

1. Who we are

Wayuto is a service that aggregates and displays events on a public map. This policy explains what data we collect, how we use it, and the rights you have. The data controller is Yarigai, Société par actions simplifiée à associé unique (SASU) with a share capital of 1 000 €, registered in the Bobigny Trade and Companies Register under number 105 203 046, whose registered office is at 8 rue Frida Kahlo, 93400 Saint-Ouen-sur-Seine, France. For any privacy question, contact us at contact@yarigai.net. The full legal notice is on the Legal notice page.

2. Data from Instagram

When an organiser @mentions the Wayuto Instagram Business account in a post, Meta notifies us via a webhook and we fetch the publicly-mentioned content through the Meta Graph API, namely:

• the post image(s) (typically an event flyer);
• the caption;
• the post permalink and timestamp.

We analyse this content to extract structured event details (title, date, venue, category) and publish it as an event listing on the public map, together with a provenance link back to the original post. We only fetch posts in which our account was explicitly mentioned.

3. Account and usage data

• Account & authentication: your email address, managed via Amazon Cognito, to create and secure your account. If you choose to sign in with Facebook (or Google), we receive your name, email address and profile picture from that provider, used only to create and recognise your account.
• Engagement: your reactions, views, and hidden events, to personalise your experience.
• Location: an approximate location, when you allow it, for "events near me" search.

4. How we use data

We use this data only to build and display the public events map, provide account features, and improve the service. We do not sell your personal data.

5. Service providers & sharing

We rely on the following providers to run the service:

• Amazon Web Services (AWS) — hosting and secure storage;
• Neo4j AuraDB — events database;
• Amazon Cognito — account authentication;
• Facebook Login (Meta) — social sign-in: if you sign in with Facebook, Meta shares your name, email address and profile picture with us;
• Mapbox — map display, address geocoding and anonymous usage telemetry;
• Ticketmaster — ticketed events source (Discovery API);
• OpenAgenda — public events source (Licence Ouverte);
• GeoNames — geographic reference data (cities, regions, countries);
• Meta / Instagram — source of mentioned events.

6. Cookies & consent

Wayuto uses no advertising cookies and no third-party analytics trackers. We only use:

• Necessary cookies & storage: essential for the site to work (authentication via Amazon Cognito, security, storing your consent choice, map display). Map display relies on Mapbox, which collects anonymous usage telemetry built into its mapping library; this cannot be disabled separately and is therefore treated as strictly necessary. The map is, however, only loaded after you make a choice on the banner.
• Preferences (functional): remembering your language, theme, map position, filters, notification preferences and last chosen location. These are stored only with your “functional” consent and are deleted if you reject or withdraw it.
• Analytics & marketing: usage statistics via a third-party analytics tool and affiliate (ticketing) link tracking. None of these trackers are present today, and they will be never enabled without your consent.

Details of the storage used in your browser:

• localStorage — wayuto.consent (your choice, necessary), wayuto.tokens (sign-in session, necessary), wayuto.theme and wayuto.locale (theme / language, functional), wayuto:map-view and wayuto:filters (map position and filters, functional), wayuto.notif.prefs.v1 (notification preferences, functional).
• sessionStorage — wayuto.pkce_verifier, wayuto.oauth_state, wayuto.returnTo (sign-in security, necessary; cleared at the end of the session).
• Cookie — wayuto_loc (last chosen location, functional, first-party, kept for 1 year).

A consent banner lets you accept, reject or customise these categories on your first visit. You can change or withdraw your choice at any time via user menu → Privacy → Cookie preferences. Rejecting is as easy as accepting.

7. Retention & deletion

You can delete your account at any time from within the app (user menu → Privacy), which removes your associated account data, including information received via social login (Facebook or Google). You can also request deletion of your data by emailing contact@yarigai.net; we handle such requests within a reasonable timeframe. Event listings derived from public posts (including Instagram) can be removed on request to the same address with the relevant post.

8. Your rights

You may request access to, correction of, or deletion of your personal data by contacting us at contact@yarigai.net.

9. Changes

We may update this policy. Any significant change will be reflected in the "last updated" date above.