Privacy policy

CiaoMap is run by [company name], [registered address], VAT number [VAT number], [country].

For anything about your data, write to [contact email].

If you are an organizer, we decide how your account and billing data is used: we are the controller.

If you have an account on an event map, the organizer of that event is the controller and we process your data on its behalf. You can still use the tools on the map or write to us, and we pass your request on.

We act for ourselves on attendee data only to keep the service secure and to count visitors for the organizer's bill.

You can use a live map without an account, and we do not ask who you are.

• Optional account: your name, email and a hashed password; or the name, email and picture Google shares; or the name and picture Facebook shares. The account belongs to that one event only.
• Sign in cookie: one cookie keeps you signed in on that event for 30 days. It is set only when you sign in; a Google or Facebook sign in also uses a 10 minute cookie while it is in progress.
• On your phone: the map remembers which announcements you have read and keeps viewed map areas and pages for offline use. Pages shown while you are signed in, and your profile picture, are never kept. This stays on your device.

To tell organizers how many people used their map, and to bill their plan, we count visits without cookies and without storing your IP address.

Each day your IP address and browser are mixed with a random value into a code that cannot be reversed. The random value is deleted after two days, so the codes can no longer be linked to anyone. Detailed records are deleted 90 days after the day ends; only daily totals are kept.

Nothing is stored on or read from your device for counting, so the map shows no cookie banner.

• Account: your name, email, a hashed password or your Google sign in, and your picture.
• Security: your sessions with IP address and browser, to keep you signed in and spot misuse.
• Your team and events: everything you put on a map, including the images you upload and the name you sign announcements with.
• Billing: your plan, its invoices and the country and VAT ID you pay with. Card payments go through our payment provider; we never see card numbers.
• Preferences: language, theme and notification choices.

A published event, with its team name and logo, is public at the team address.

Published events are also listed in our public event directory unless the organizer hides the event in its settings.

Attendee data is never public.

• To provide the service you asked for: accounts, maps and sign in (contract).
• Legitimate interest: security, stopping fake visitors, and visitor statistics for organizers.
• Legal obligation: keeping billing records as the law requires.

We do not sell your data and we do not use it for advertising.

A few providers process data for us:

• Vercel, our hosting, with servers in Frankfurt.
• Neon, our database host.
• Uploadthing, which stores the images organizers upload.
• Google and Facebook, only if you choose to sign in with them.
• Map providers (OpenStreetMap, CARTO, Esri, OpenTopoMap): your browser loads the map images straight from them, so they see your IP address.
• Nominatim by OpenStreetMap, for the venue searches organizers make.
• Stripe, for payments, once card checkout is live.

Some providers are based in the United States. For those transfers we rely on the EU US Data Privacy Framework or on standard contractual clauses.

• Attendee accounts: until you delete yours or the organizer deletes the event.
• Sign in lasts 30 days for attendees and 7 days for organizers.
• Visitor counting: random values for 2 days, detailed records for 90 days, daily totals as long as the event exists.
• Organizer accounts: until you ask us to delete yours.
• Billing records: as long as accounting law requires.

You can ask to see, correct, download or delete your data, and to limit or object to how we use it. You can also complain to your data protection authority.

Attendees: while the event map is live, open its account menu to download your data or delete your account. Deleting removes your account and signs you out on every device for that event. After the event, write to the organizer or to [contact email].

Organizers: write to [contact email]. Export and delete from the dashboard are on the way.

When this policy changes we update the date at the top, and we tell organizers before an important change applies. The terms for organizers include our data processing agreement.