privacy policy
This page explains what this site does with your data, in plain terms.
browsing without an account
- Server logs. Each request is logged with its method, path, status, timing and your IP address, to keep the site secure and working (GDPR Art. 6(1)(f)).
- Map tiles and place search. Your browser loads map images from tile.openstreetmap.org, and the “jump to location” box sends your search text to nominatim.openstreetmap.org. Both are run by the OpenStreetMap Foundation, which receives your IP address (see their privacy policy).
- Your location is only requested when you press “find benches near me” or the location button on the map. It is used in your browser to move the map. The map then asks our server for benches in the visible area. Your exact position is never stored.
- Fonts are served from this site, not from Google.
analytics (only with your consent)
If you choose “allow analytics”, we load Google Analytics (Google Ireland Ltd.) to count visits and see which pages are used. It sets cookies and sends your IP address and device information to Google, which may process it in the USA. If you don't agree, Google Analytics is never loaded. Legal basis: your consent (GDPR Art. 6(1)(a), § 25 TDDDG). You can change your choice at any time:
Your choice is saved in your browser's local storage under fab-consent.
with an account
- Account data: username, email address and a salted hash of your password (never the password itself). Needed to provide your account (GDPR Art. 6(1)(b)).
- Session cookie (
session, HttpOnly, up to 30 days) keeps you logged in. It is strictly necessary and set only when you log in. - Benches you post: photos, location, description, tags and ratings. Bench posts and your username are public. EXIF metadata, including GPS position and camera details, is removed from photos when you upload them.
- Deleting a bench removes its photos from our server.
your rights
You have the right to access, correct, delete, restrict or export your data, and to object to processing (GDPR Art. 15–21). You can also complain to a data protection supervisory authority.