Privacy policy

1. Who is responsible

The controller is the person named in the legal notice. For all questions about data protection: [email protected].

2. Visiting the website

BrockiMap is hosted by Cloudflare (Cloudflare, Inc., USA). When you open a page, your browser transmits technical data such as IP address, time, page requested, browser and operating system. Cloudflare processes this data to deliver the site and to protect it against attacks, and deletes it after a short time. We do not use it to identify you.

The fonts are served from BrockiMap itself; no connection to Google Fonts is made.

3. Map

The map tiles come from OpenFreeMap (openfreemap.org). To load them, your browser connects to their servers and transmits your IP address. The map data comes from OpenStreetMap.

4. Location («Near me»)

Only if you tap «Near me» or the location button does your browser ask whether BrockiMap may use your location. If you allow it, the location is used only in your browser to sort Brockis by distance and to show your position on the map. It is not sent to us or stored.

The search for places and postcodes also runs entirely in your browser.

5. Account, saves and visits

If you open an account, we store your email address, a securely encrypted password (if you set one), your language, the time of registration and sign-in, and the Brockis you save or mark as visited or favourite. When signing in, your IP address is also processed in order to prevent misuse. Purpose: to provide your account and your lists (Art. 31 FADP: performance of the contract with you).

Account and data are stored with Supabase (Supabase, Inc., USA) in a data centre in Europe. Your lists are visible only to you; technical access rules (row level security) ensure this.

If you sign in with Google, Google transmits your name, email address and profile picture to us. Google’s privacy policy applies to the sign-in at Google.

Your data is stored for as long as your account exists. If you delete your account, we delete your data within 30 days, unless we are required by law to keep it.

6. Emails

Sign-in codes and links are sent via Resend (Resend, Inc., USA) from an EU location. Resend processes your email address and the content of the message for this purpose.

Emails to [email protected], for example reports of errors or missing Brockis, are forwarded via Cloudflare Email Routing to our mailbox. We use the content only to process your request and delete it when it is no longer needed.

7. Storage in your browser

BrockiMap does not use tracking or advertising cookies. In your browser’s local storage we only keep what is technically necessary: your sign-in (so that you stay signed in) and, briefly, a Brocki you wanted to save before signing in. You can delete this at any time in your browser settings.

We currently do not use any analytics or statistics service. If this changes, we will update this policy beforehand.

8. Google ratings and external links

BrockiMap shows ratings from Google. We retrieve them on our server; no data about you is sent to Google in the process.

Links to Google Maps, SBB, the websites of the Brockis and other providers only take you there when you click them. From then on, the respective provider’s privacy policy applies.

9. Disclosure and data abroad

We do not sell your data and only pass it on to the service providers named here, who process it on our behalf, or if we are required to do so by law.

Cloudflare, Supabase and Resend are US companies. Data may therefore be processed in the USA and other countries. Cloudflare is certified under the Swiss-US Data Privacy Framework; otherwise, the transfer is based on the standard contractual clauses recognised by the Federal Data Protection and Information Commissioner (FDPIC).

10. Your rights

You can request information about your data at any time, have it corrected or deleted, object to its processing and request it in a common electronic format. To do so, write to [email protected]. We may ask you to verify your identity.

If you believe that we are not processing your data correctly, you can lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch).

11. Security and changes

All connections are encrypted (HTTPS). Access to the data is restricted to what is necessary. We may amend this privacy policy; the version published here applies. See also our terms of use.