Privacy Policy

What we collect

• Reports and place suggestions: the description, coordinates and any image you choose to submit. An email address is optional — if provided we keep it so we can contact you.
• Technical data: Cloudflare Web Analytics records cookie-less, non-identifying visit statistics.
• Error reports: if the app encounters a technical error, an automatic report is sent to Sentry (Functional Software, Inc.), stored in their EU data centre. Reports contain the error message, a technical stack trace, browser and OS version and the page address — no names, no accounts and no IP addresses are stored. We use these solely to find and fix bugs; reports are deleted automatically after 90 days.
• Error session replay: when an error occurs, Sentry also keeps a short recording of the ~30 seconds before it — a reconstruction of the page structure and your clicks, not a video. All text and form inputs are masked and media is blocked, so no readable content is captured. We use it only to reproduce and fix the error; kept for 90 days.
• Performance data: a small sample of page-load and request timings (web vitals) is sent to Sentry to find slow spots. No personal data.
• Bug reports you send: if you use “Report a service error”, the message you write — and the name and email if you choose to add them — is sent to Sentry so we can follow up.

Where data is stored

• Supabase (EU region): reports, place submissions, images.
• Cloudflare R2 and Workers: edge cache and static asset hosting.
• Resend (USA): notification email delivery.
• Cloudflare Turnstile: bot protection on form submissions.
• Sentry (EU region): automatic error reports, error-session replays (masked), performance samples and bug reports you submit, kept for 90 days.

Third-party services in the map

• OpenStreetMap: trail and base map data.
• Protomaps: self-hosted vector map tiles.
• Wikipedia: place summaries.

These services handle requests from your browser according to their own policies.

Your rights

You have the right to request access to, correction of, or deletion of personal data we hold about you. Contact sat@xcqt.se.

Cookies

The service does not set marketing cookies. Only technically necessary storage (Service Worker cache and sign-in token) is stored locally in your browser.