Privacy Policy

This privacy policy describes how we handle your personal data when you use our app or website.

1. Controller

Joel Domke

19joeld97@gmail.com

2. General information on data processing

We only process personal data if this is necessary for the provision of our app and website as well as our content and services.

Legal bases:

Art. 6 Abs. 1 lit. a DSGVO (consent)

Art. 6 Abs. 1 lit. b DSGVO (performance of a contract)

Art. 6 Abs. 1 lit. f DSGVO (legitimate interest)

3. Use of our website (urban-canvas.app)

3.1 Server logs

When accessing the website, automatically information is collected:

  • IP address
  • Date/time
  • Browser type/version
  • Operating system
  • Referrer URL

Legal basis: Art. 6 Abs. 1 lit. f DSGVO (operation and security of the website).

3.2 No cookies

We do not use cookies or tracking tools on our website.

3.3 Hosting and security - Cloudflare

Our website is provided by the provider Cloudflare. Cloudflare acts as a content delivery network (CDN) and security service (e.g. DDoS protection). The following data is processed:

  • IP address of the website visitor
  • Date/time
  • Accessed content
  • Technical information about browser and operating system

Legal basis: Art. 6 Abs. 1 lit. f DSGVO (legitimate interest in the secure and efficient provision of our website).

Provider: Cloudflare Inc., 101 Townsend St, San Francisco, CA 94107, USA

Privacy policy: https://www.cloudflare.com/privacypolicy/

4. Use of our app (Urban Canvas)

4.1 Location data

To record your activities (expired streets), the app records your current location.

Location data is only collected with your explicit consent (Art. 6 Abs. 1 lit. a DSGVO).

They are stored to display your progress in the app.

4.2 Registration & Authentication

For the use of certain functions, registration is required.

For this, we use Supabase Authentication.

The following data is processed: Email address, password (encrypted) and other optional information.

Provider: Supabase Inc., San Francisco, USA.

Privacy policy: https://supabase.com/privacy

4.3 Map tiles

To display the map, we use map tiles from Stadiamaps. When those tiles are accessed, Stadiamaps receives the following data:

  • IP address
  • Date/time
  • Accessed content
  • Technical information about browser and operating system

Provider: Stadiamaps, East Lansing, MI, USA.

Privacy policy: https://stadiamaps.com/privacy

4.4 Leaderboard

In our app, there is a leaderboard that compares the progress of users in completing streets in a given area (e.g. country, state, city, municipality, district or custom area). By default, only anonymized percentage values are displayed that cannot be assigned to a specific user.

Users have the option to voluntarily agree that their self-selected name is displayed in the leaderboard. The legal basis is Art. 6 Abs. 1 lit. a DSGVO (consent). The consent can be withdrawn at any time for the future in the account settings. No display of further activities or detailed location data of other users takes place.

4.5 Database storage

User accounts and activity data are stored in Supabase databases. This may result in data transmission to the USA.

4.6 Children and young people

Our app is not intended for persons under the age of 16 or under the age of 13 (USA). We ask these to refrain from providing personal data to us. To ensure that the age limits are observed, this age limit must be confirmed when creating an account.

If we become aware that we have collected personal data of a child under the age of 16 or 13 (USA), we will delete this immediately.

5. Rights of the user

You have the right at any time to:

  • Access: You can request confirmation from us that personal data relating to you are being processed. If so, you will receive a copy of this data as well as further information in accordance with Art. 15 DSGVO.
  • Correction: If stored data is incorrect or incomplete, you can request immediate correction (Art. 16 DSGVO).
  • Deletion: You can request the deletion of your personal data, provided that no legal retention requirements exist or the processing is not required for other legal reasons (Art. 17 DSGVO).
  • Restriction of processing: Under the conditions of Art. 18 DSGVO, you can request that we only process your data to a limited extent (e.g. during a check of your objections).
  • Data portability: You have the right to receive the personal data relating to you in a structured, common and machine-readable format or to request their transmission to another controller (Art. 20 DSGVO).
  • Withdrawal of consent granted: A once granted consent to process personal data can be withdrawn at any time for the future with future effect (Art. 7 Abs. 3 DSGVO).
  • Objection to processing: You can object to the processing of your personal data, which is based on a legitimate interest, at any time for reasons arising from your particular situation (Art. 21 DSGVO). Thereafter, we only process your data for strictly necessary purposes.
  • Complaint to a supervisory authority: If you believe that the processing of your data violates the GDPR, you can file a complaint with a supervisory authority (Art. 77 DSGVO). The supervisory authority at your usual place of residence or place of work is particularly competent.

6. Data transmission to third countries

Since Supabase and possibly the provider of Stadiamaps are located in the USA, data transmission to third countries outside the EU may occur.

7. Changes

We reserve the right to amend this privacy policy if the app or legal requirements change.