Privacy policy

The data controller is Greek Island Platforms Single Member P.C. (registered in Greek as Greek Island Platforms ΜΟΝΟΠΡΟΣΩΠΗ Ι.Κ.Ε.).

Γ.Ε.ΜΗ. (General Commercial Registry) 195743338000
VAT No. 803382933
EUID ELGEMI.195743338000
Registered office: Naxos 84300, Greece
Supervisory body: Chamber of Kyklades, member reg. 65787

Write to us about anything on this page at [email protected].

We have not appointed a Data Protection Officer, because we are not required to have one.

The iPhone and Android apps are published on the App Store and Google Play by Global Outsource Solutions Pty Ltd (Australia), which holds the developer accounts, on behalf of Greek Island Platforms Single Member P.C. That is why the stores show it as the seller.

Global Outsource Solutions does not operate the service and does not receive your data. The controller for everything described on this page is Greek Island Platforms Single Member P.C., and that is who to contact: [email protected].

Navigation pages (/q, /map): your language choice (a cookie) and, only if you allow it, your device location — used on your device and for routing. While you navigate we also keep a trace of the walk (positions under a random per-walk id, with no account, name, device id or IP address) to improve the map and directions — see “Why we are allowed to” below for how long we keep it. Page visits are counted by analytics that stores nothing on your device: see the cookie policy.

Mapper app: your account (name and email from Sign in with Apple or Google) and the walks you record — 3D geometry of streets and GPS trajectories. The camera is used only for motion tracking on your device; no photos or video are ever saved or uploaded.

Only if you agree. The iPhone and Android apps ask once, before anything is collected, and you can change your answer any time in Profile. If you say no, nothing is sent — that is also the default on a fresh install.

If you say yes, we use Google Analytics for Firebase and Firebase Crashlytics (Google Ireland Limited) to count which screens and features get used, and to receive crash reports so we can fix them. What is sent: the screen or button name, counts, your language, the app version, a random app-instance identifier, device model and OS version, and your approximate country, which Google derives from your IP address and which we cannot switch off. What is never sent: your name, your email, your account, your saved accommodation, your search text, or your GPS position. Advertising identifiers are disabled outright (no IDFA, no Android advertising ID, no IDFV, no SSAID); nothing is used for advertising or shared with advertisers.

Legal basis: your consent (ePrivacy Article 5(3); GDPR Article 6(1)(a)). Withdraw it any time in Profile — the analytics identifier is then deleted from your device and collection stops. Retention: events 14 months, crash reports 90 days.

The anonymous walk trace described above is separate and continues regardless of this setting: it carries no identifier of any kind, never leaves our own servers, and exists so we can find where our directions send people wrong.

Walk data builds the public street map of the island. Approved contributions earn points shown on the public leaderboard (first name only). We don't sell personal data.

We use a small number of providers. Each is bound by a data-processing agreement and may only act on our instructions. Providers outside the EEA are marked.

DigitalOcean, LLC — hosting. Our server and database run in New York, United States; account, claim and walk data is stored there. This is outside the EEA. Transfer safeguard: Standard Contractual Clauses.

Cloudflare, Inc. (United States) — DNS, content delivery, security filtering and the edge analytics described in the cookie policy. Transfer safeguard: EU–US Data Privacy Framework, backed by Standard Contractual Clauses.

Google Ireland Limited (Ireland) — Google Analytics 4 for this website, and Google Analytics for Firebase plus Crashlytics inside the apps, with onward transfer to Google LLC in the United States under the EU–US Data Privacy Framework, backed by Standard Contractual Clauses in Google's data-processing terms.

Twilio Inc. / SendGrid (United States) — the transactional email we send (owner welcome kits, sign-in alerts, our replies). Transfer safeguard: EU–US Data Privacy Framework, backed by Standard Contractual Clauses.

Apple Inc. and Google Ireland Limited — only if you create a mapper account with Sign in with Apple or Google sign-in. They pass us your name and email; we pass them nothing about you.

The EU–US Data Privacy Framework is under appeal before the Court of Justice of the EU (Latombe, C-703/25 P). If it is ever set aside, the Standard Contractual Clauses already in place with each provider continue to apply.

We do not sell personal data and we do not share it for advertising.

Giving you directions — our legitimate interest in running the service you asked for (GDPR Art. 6(1)(f)). Your location is used in your browser and to compute the route. We never store your position against you.

Anonymous walk traces — legitimate interest in finding where our directions send people wrong (Art. 6(1)(f)). A trace carries a random per-walk identifier and no account, name, device id or IP address. Because any GPS trace could in principle be re-identified, we treat these as pseudonymous rather than truly anonymous. Kept 24 months, then deleted automatically. If your browser sends a Global Privacy Control signal, no trace is recorded at all.

Mapper account and contributions — performance of our agreement with you (Art. 6(1)(b)). Kept while your account exists, and erased within 30 days of your deletion request. Street geometry you contributed stays in the public map, detached from you.

Business listing claims — steps taken at your request before an agreement, plus our legitimate interest in checking who owns a listing (Art. 6(1)(b) and (f)). Kept 24 months after the claim is decided, then deleted automatically. Details you publish on your listing stay public until you ask us to remove them.

Email to business owners — legitimate interest in offering a free listing to a business we have already mapped (Art. 6(1)(f)). We take the address from the business's own sign, website or public listing. One reply stops it for good. Kept 24 months from our last contact.

App analytics and crash reports — your consent, and nothing is collected until you give it (Art. 6(1)(a)). Crash reports are kept 90 days; analytics events are kept for the retention period set in our Google Analytics settings (currently 2 months for event-level data and 14 months for user-level data).

Website analytics — see the cookie policy.

Security: sign-in alerts, rate limiting and server logs — legitimate interest in keeping the service up and unabused (Art. 6(1)(f)). Your IP address is used as a short-lived rate-limit counter in memory and is never written to our database. Logs kept 90 days.

We make no automated decisions about you and build no profiles.

You can ask us to give you a copy of your data (access), fix it (rectification), delete it (erasure), pause our use of it (restriction), hand it to another provider (portability), or stop a use we base on legitimate interest (objection). Where we rely on your consent you can withdraw it at any time, without affecting what we did before you did.

Write to [email protected]. We answer within one month, free of charge.

If you think we have got it wrong, you can complain to the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα): Κηφισίας 1-3, 115 23 Αθήνα, www.dpa.gr, +30 210 6475600. If you live in another EU country you may complain to your own authority instead.