In short
- Your exact location is calculated on your device and is not stored on our servers.
- We use Google Analytics for visitor statistics and Google AdSense for ads. In the European Economic Area (EEA), the UK and Switzerland, Google's consent message asks for your choice first; without your consent, no analytics or advertising cookies are set.
- Everywhere else, Google Analytics and AdSense run by default, and you can object at any time. There are no user accounts.
- To show the address, map and elevation, your browser queries third-party map services.
Controller
The controller is named in the legal notice. You can send privacy questions to appsplosion.help@gmail.com.
What data is processed and why
Exact location
When you tap “Show my exact location” and accept the prompt, your browser gives the page your latitude, longitude, accuracy and, if available, altitude. This data is used on your own device to draw the map and calculate the results. It is neither sent to our server nor stored. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time in your browser settings.
Approximate area by IP
When the page loads, our hosting provider Cloudflare estimates your city from the IP address of your connection, so that we can show a starting point without permission. The estimate is made at the moment of the request and is not stored. If this fails, your browser requests it from the BigDataCloud service. The legal basis is our legitimate interest in a working site (Art. 6(1)(f) GDPR).
Hosting and technical logs
The site is delivered through the network of Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA). In doing so, Cloudflare processes your IP address and technical data of each request (time, page requested, browser) to deliver the site quickly and securely and to fend off attacks, and stores them only temporarily. Cloudflare is certified under the EU-US Data Privacy Framework. The legal basis is our legitimate interest in a secure and fast site (Art. 6(1)(f) GDPR).
Third-party services involved
To deliver the result, your browser connects directly to the following services. They receive your IP address and the data listed:
| Service | Purpose | Data received |
|---|---|---|
| Nominatim (OpenStreetMap Foundation) | Turn coordinates into an address and search for places you type | Latitude and longitude, rounded to a few meters, or your search text |
| Photon (Komoot) | Backup if Nominatim doesn't respond | Latitude and longitude, or your search text |
| BigDataCloud | Approximate city and area details missing from the map | Your IP and, if you allowed it, latitude and longitude |
| OpenFreeMap | Map images | The section of the map being displayed |
| Terrain Tiles (open data on Amazon Web Services) | Ground elevation | The tile, several kilometers across, that contains the point requested |
Each of these providers has its own privacy policy. We don't pass your name, your email address or any identifier to them.
Google Analytics (visitor statistics)
We use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It shows us which pages are visited, which countries and searches visitors come from, and where the site needs improving.
When Google Analytics is allowed to use cookies, it stores cookies (_ga and _ga_<ID>, lasting up to two years) on your device and sends usage data to Google: pages viewed, referring source, device type, browser, screen size, language and the approximate region derived from your IP address. According to Google, Google Analytics 4 does not store IP addresses. We never send your exact location or the coordinates in shared links to Google. The data is deleted after 14 months.
Google may also transfer data to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, for which there is an adequacy decision of the European Commission (Art. 45 GDPR).
In the EEA, the UK and Switzerland, the legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Until you consent, Google Analytics runs in “denied” mode (Google Consent Mode v2) and sets no cookies. Everywhere else, Google Analytics runs by default, based on our legitimate interest in measuring how our free service is used (Art. 6(1)(f) GDPR). You can object at any time with Google's opt-out browser add-on. More information is in Google's privacy policy.
Google AdSense (advertising)
To finance the free service, we have applied to show ads through Google AdSense, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When ads run, Google and its partners can use cookies or similar identifiers (for example __gads, __gpi and IDE) to show ads, limit how often you see the same ad, measure how ads perform and, where allowed, personalize ads.
In the EEA, the UK and Switzerland, Google only shows personalized ads if you consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG); without consent, you only see limited, non-personalized ads. Everywhere else, AdSense runs by default, based on our legitimate interest in financing the free service (Art. 6(1)(f) GDPR); you can turn off personalized ads at any time in Google's My Ad Center. Google may transfer data to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework. Google explains how it uses cookies in advertising on this page.
Share links
When you create a location link, the coordinates are in the link itself, after the # sign. That part is not sent to our server. Anyone who receives the link can see the point, so only share it with people you choose.
Cookies and consent
Consent is managed by Google's certified consent tool (Google “Privacy & messaging”, based on the IAB Transparency and Consent Framework), which is loaded with the AdSense script. What happens depends on where you are:
- EEA, UK and Switzerland. On your first visit, Google's consent message appears in your language with the options “Consent”, “Do not consent” and “Manage options”. Until you consent, Google Analytics and Google AdSense run in “denied” mode (Google Consent Mode v2): no analytics or advertising cookies are set and no personalized ads are shown. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can change or withdraw it at any time with the “Cookie settings” link at the bottom of every page, which reopens Google's message.
- All other countries. Google's message does not appear. Google Analytics and Google AdSense run by default, based on our legitimate interest in measuring and financing the free service (Art. 6(1)(f) GDPR). You can object at any time, as described under “Your rights”.
Google's consent tool stores your choice in cookies (FCCDCF and FCNEC) for up to 13 months; these cookies are technically necessary (§ 25(2) no. 2 TDDDG).
Your rights
Under the GDPR you have the right of access, rectification, erasure, restriction of processing and objection. To exercise them, write to appsplosion.help@gmail.com. You can withdraw any consent you have given at any time with effect for the future; for Google Analytics and Google AdSense, use the “Cookie settings” link at the bottom of every page. Where we rely on our legitimate interest, you can object at any time (Art. 21 GDPR): to Google Analytics with Google's opt-out browser add-on, to personalized ads in My Ad Center, or by writing to us. Since we don't store your location, we hold no personal data about you apart from the temporary technical logs and, where Google Analytics may use cookies, the pseudonymous statistics in Google Analytics. You also have the right to lodge a complaint with a data protection supervisory authority.
Changes
Advertising through Google AdSense is already covered by this policy. If we add other services or change how data is processed, we will update this page and the date at the top.