Privacy

Controller

Steffen Gliech, gliech@gmx.net.

What is processed

• Server logs. Requests to this site are logged, including the requesting IP address, to operate and secure it. Legal basis: Art. 6 (1) (f) GDPR.
• Cookies and browser storage. piper_session is the rider's sign-in cookie for their management pages, and is strictly necessary to provide access to them (§ 25 (2) TDDDG). piper_watch carries a Watch Buddy's viewing credential. piper_home is a non-secret hint used to route the browser toward rider pages. The browser also keeps viewer preferences, including the theme, in localStorage (piper.prefs.v1). Only when the page is opened with ?debug=1, the viewer's debug log is kept in per-tab sessionStorage (piper.debuglog.v1). Legal basis for the processing enabled by the session cookie: Art. 6 (1) (f) GDPR.
• Map tiles. Where a map is shown, the browser loads tiles directly from tile.openstreetmap.org, operated by the OpenStreetMap Foundation in the United Kingdom, which receives the IP address in the process, together with the address of this site but not of the page being viewed. The UK is covered by a European Commission adequacy decision. Legal basis: Art. 6 (1) (f) GDPR.
• Wind. Where this deployment shows the wind a rider is riding in, the server, not your browser, asks Open-Meteo (Open-Meteo, Bruggisser Patrick, Switzerland) for the wind where the rider is. It rounds that position to about 11 km before sending it, and asks at most once an hour, so that service receives only that somebody was in a broad area during an hour, never a route or a coordinate. Switzerland is covered by a European Commission adequacy decision. Legal basis: Art. 6 (1) (f) GDPR. Weather data by Open-Meteo, licensed CC BY 4.0.
• Error reports. When a page of this site or its server hits an error, a report goes to Sentry (Functional Software, Inc.), hosted in the EU (Frankfurt). A report carries the error, its stack trace and the version of this site. One from a page also carries the browser's user-agent string (the browser and operating system and their versions), its language and time zone, and the name of the screen, but not the page's address; it travels through this site's server, which removes share codes first. Sentry does not receive the visitor's IP address. Legal basis: Art. 6 (1) (f) GDPR.
• Crash reports. When the Piper app for Android crashes while it is paired with this site, it sends the crash report to this site's server, which forwards it to Sentry (Functional Software, Inc.), hosted in the EU (Frankfurt). The server keeps only the error type, the stack trace, the app and Android versions and the time, and removes coordinates, addresses, links, share and pairing codes, photo names and the names of the rider and the phone first. Sentry does not receive the sender's IP address. Nothing is sent when the phone is offline or not paired. Legal basis: Art. 6 (1) (f) GDPR.

This site is hosted by Hetzner Online GmbH, which processes the above on the controller's behalf and is a recipient of it; the server runs in Nuremberg, Germany.

How long

This site's server keeps its own log files and deletes them after 7 days. Sentry keeps error and crash reports for up to 30 days.

Your rights

You have the rights of access, rectification, erasure, restriction and portability under Art. 15 to 20 GDPR, and the right to lodge a complaint with a supervisory authority. Use the address above.

Right to object. Everything above rests on Art. 6 (1) (f) GDPR, so you may object to it at any time, on grounds relating to your particular situation, under Art. 21 (1) GDPR. Use the address above.

Back to Piper