Privacy policy (Datenschutz)
Placeholder – complete before going live.
Guest guide pages use no tracking, no analytics, no advertising cookies and no third-party embeds. Fonts are served from this domain.
Technically necessary data: when you open a guide, our hosting provider processes your IP address in server logs for security and operation (Art. 6 (1) (f) GDPR).
Language preference: if you choose a language, we store it in a cookie (gg_lang) on your device for 60 days.
Access codes: if you enter a PIN, it is sent to our server for verification. We store a hashed (non-reversible) form of your IP address for 15 minutes to prevent brute-force attempts.
Links to maps or websites open external services only when you tap them.
Hosts (customers): sign-in happens via Whop (Whop Inc., USA). We receive your Whop user id, name and e-mail address and check your membership status with Whop. We store no Whop passwords or tokens.
Processors for the host dashboard: [Supabase – database, region], [Vercel – hosting, region], Anthropic (texts the host asks the AI to write or translate; no guest data). [Add data processing agreements and transfer safeguards (e.g. EU-US Data Privacy Framework / SCCs).]
Controller: [Company / name, address, email]. You have the right to access, rectification, erasure, restriction, portability and objection, and to lodge a complaint with a supervisory authority.