SITEDIA · GERMANY
Privacy policy
Effective: 15 October 2026
This policy explains how sitedia processes your personal data, in line with the General Data Protection Regulation (GDPR).
In brief
| Controller | sitedia · [email protected] |
|---|---|
| Purposes | Providing the service and your account, managing passes and refunds, answering your messages, improving the service and protecting it from abuse |
| Legal bases | Performance of the contract; legitimate interest (security and improvement); legal obligation (accounting records); consent (survey) |
| Recipients | Service providers (Google, Resend, Cloudflare) and Polar, which sells the pass. Some data is transferred outside the European Union |
| Your rights | Access, rectification, erasure, restriction, objection, portability; complaint to a data protection supervisory authority |
1. Data we process
| When | Data | Why | Legal basis |
|---|---|---|---|
| Signing in with Google | Google account ID, email, name, profile picture | Identify you and sign you in | Performance of the contract |
| Signing up with email | Email, verification code (hashed), password (hashed) | Account verification and security | Performance of the contract |
| Session | Session ID, browser information, access logs | Keep you signed in, prevent abuse | Performance of the contract; legitimate interest (security) |
| Using the service | Addresses, coordinates, radius and settings you enter; log of features used | Produce results, improve the service, apply the refund policy | Performance of the contract; legitimate interest (improvement) |
| Buying a pass | What Polar sends us: order number, pass, amount, tax, currency, status and dates of payment and refund, email, name and billing address of the order | Activate and manage the pass, refund, keep accounts | Performance of the contract; legal obligation |
| Survey | Your answers | Improve the service | Consent (optional) |
| Messages | Content, contact details, attachments | Reply to you | Performance of the contract; legitimate interest |
Passwords are never stored in readable form. sitedia never receives your card number, security code or bank details. The data needed for the account and the pass is required to provide them; without it you cannot sign in or buy. We take no decisions based solely on automated processing that have legal effects for you.
The service is not intended for people under 16, who cannot create an account. You must be at least 18 to buy a pass.
2. How long we keep data
Account data is kept until you delete your account or ask us to delete it, and is then erased without undue delay. The email verification code expires after 10 minutes and the session after 30 days. Purchase records that the law requires us to keep (tax and accounting) are kept for the legal period.
3. Service providers acting for us
| Provider | Why |
|---|---|
| Google LLC | Signing in with Google |
| Resend | Sending verification and password reset codes |
| Cloudflare, Inc. | Content delivery and security |
When your browser loads base maps, fonts or code libraries directly from another provider (for example OpenFreeMap, as a fallback basemap.de from BKG or Esri, or unpkg), that provider receives the connection data (IP address, browser). sitedia serves its fonts from its own server.
4. Payments: Polar
The pass is sold on behalf of sitedia by Polar Software, Inc. ([email protected]), the Merchant of Record. Polar processes payment data under Polar’s privacy policy.
| What | Details |
|---|---|
| Sent by sitedia when the checkout page opens | Account ID and email, chosen pass, IP address (to show your country’s currency, payment methods and tax) and language |
| Entered by you at checkout | Payment details (received only by Polar and its payment providers), billing address, name and email |
| Sent back to sitedia by Polar | The order data listed under “Buying a pass” (section 1) |
| Why | Payment, tax, receipts, order management and fraud prevention |
| Countries | Including the United States |
Nothing is sent to Polar unless you open the checkout page. Free features stay available either way.
5. Transfers outside the European Union
sitedia is run from the Republic of Korea, where account data is stored. The European Commission has found that the Republic of Korea ensures an adequate level of protection (Implementing Decision (EU) 2022/254 of 17 December 2021). The providers in sections 3 and 4 process data in the United States and other countries, with the safeguards each describes in its own privacy policy.
6. Cookies and local storage
| Cookie | Why | Lasts |
|---|---|---|
sd_session | Keep you signed in | 30 days |
sd_oauth_state | Secure signing in with Google | 10 minutes |
sd_de_lang | Remember the language of the Germany edition (German or English), so pages and diagrams come in that language. On your first visit the page sets it from your browser’s language setting; when you switch, from your choice | 1 year |
The German edition (pages under sitedia.app/de) does not set any statistics, advertising or tracking cookies and uses no third-party analytics tools. We count visits and purchases on our own server without a cookie, so we cannot tell whether two visits came from the same person.
Your browser’s local storage also keeps your display settings (colours, background, saved style), your language choice, notices you have closed and a technical signal between tabs after a payment. When you switch language, the tab remembers the chosen site and radius for up to 10 minutes so you come back to it. These only make the interface work.
You can refuse or delete cookies and local storage in your browser; without sd_session you will not stay signed in.
7. Your rights
You can ask for access to your data, rectification, erasure, restriction of processing and portability, and you can object to processing based on legitimate interest. If you gave consent (survey), you can withdraw it at any time, without affecting what came before. You can delete your account yourself: sign in and choose “Delete account” at the bottom of the page. Email [email protected]; we will check your identity and reply within one month. If we cannot act on a request for a legal reason, we will tell you why.
You can also complain to a data protection supervisory authority, in particular the authority of the German state (Land) where you live.
8. Contact
For questions about your personal data: [email protected].
9. Changes
If we change this policy, we will announce it in the service at least 7 days before the change takes effect.