Privacy Policy
This is a courtesy translation. The German version is legally authoritative.
1. Controller
Raffael Hickisch
Goldschlagstraße 23/18
1150 Vienna
Austria
E-mail:
2. Principle: data minimisation
This application is in its alpha stage and is deliberately built so that no analytics or tracking data about visitors is collected. There are no web analytics, no tracking cookies, no fingerprinting, and no sharing of usage data with third parties. The application does not store IP addresses.
3. Data processed
3.1 Technically necessary cookies
The application only sets functional cookies:
- access_pwd – stores the alpha access password so you do not have to re-enter it on every visit (validity: 30 days). This cookie contains no personal data and no identifier that could identify you individually.
- session – only if you voluntarily register a user account: a session identifier for login.
Legal basis: Art. 6(1)(b) and (f) GDPR (provision of the service, legitimate interest in access protection during the alpha phase). No tracking cookies are used.
3.2 Local settings in your browser (localStorage)
Display preferences (e.g. map settings, dismissed hints, a local page-view counter) are stored exclusively in your browser's localStorage and are never transmitted to the server. You can delete this data at any time via your browser settings.
3.3 User accounts (voluntary)
If you voluntarily register an account, we store the data you provide: e-mail address, name, organisation and organisation type, as well as a password (stored only as a cryptographic hash). This data is used exclusively to grant and manage your access. Legal basis: Art. 6(1)(b) GDPR.
3.4 GPX uploads (voluntary)
If you upload GPS tracks (GPX files) from patrols, we process the position data they contain in order to compute aggregated patrol coverage (10×10 km grid cells). We store the file name, classified track segments and — for logged-in users — the association with the account. The original GPX files are not retained permanently after processing. Please do not upload tracks that could reveal information about vulnerable individuals without their consent. Legal basis: Art. 6(1)(a) and (b) GDPR.
3.5 Server log files and rate limiting
The application itself does not write access logs containing personal data. To protect against abuse, IP addresses are processed briefly in memory only for rate limiting and are not stored. The hosting provider (exe.dev) may keep technical log files at the infrastructure level according to its own policies; see section 8. Legal basis: Art. 6(1)(f) GDPR (operational security).
4. No analytics or tracking services
This website uses no analytics tools (such as Google Analytics, Matomo, Plausible, etc.), no advertising networks, no social media plugins, and no third-party tracking services.
5. Embedded third parties (CDN and map services)
To display the interactive map, resources are loaded from third-party providers. For technical reasons, your IP address is transmitted to the respective provider:
- unpkg.com – MapLibre map library, icon font
- cdn.jsdelivr.net – export libraries
- basemaps.cartocdn.com (CARTO) – dark base-map tiles
- demotiles.maplibre.org – map fonts
- Google Maps / Esri ArcGIS Online – satellite imagery tiles, only if you enable the satellite view
In the context of this application, these services do not set tracking cookies. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a functioning map display).
6. Retention period
Account and upload data are stored for as long as the account exists or until you request deletion. Since the application is in its alpha phase, data sets may also be reset in the course of development. Session cookies expire automatically.
7. Your rights
You have the right to:
- Access to your stored data (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure of your data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
- Withdrawal of consent given (Art. 7(3) GDPR)
To exercise these rights, please contact us at the e-mail address given above.
8. Right to lodge a complaint
You have the right to lodge a complaint with the Austrian data protection authority:
Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Vienna
www.dsb.gv.at
9. Hosting
This website is hosted by exe.dev (Bold Software, Inc., USA). The servers are located in the USA. Data transfer to the USA takes place on the basis of Art. 49(1)(b) GDPR (performance of the usage contract). More information: exe.dev Privacy Notice.
Last updated: July 2026