Privacy policy

Controller

Nuño Valencia Castrillo. Privacy and rights contact: [email protected]. This is a personal project with no commercial activity at present.

Data processed

The infrastructure receives IP addresses, request time, URL, browser information and technical headers to deliver the website, keep operational and security logs and produce request statistics without analytics cookies.

Uploads include the image, selected place and coordinates, submission time, moderation result and associated IP address. Approved images and places are public; the uploader IP is not published. There are no user accounts.

Your IP is also used with an internal GeoIP database to centre the map approximately. No GPS permission or precise device location is requested. Place searches are sent to the project service to return results.

Purposes and legal bases

Processing, moderating and publishing the flag you submit provides the functionality you request (GDPR Article 6(1)(b)). Do not upload identifiable people or personal information.

Operation, abuse prevention, incident handling, request statistics and approximate map positioning rely on the legitimate interest in a safe and usable service (Article 6(1)(f)). You may object by email. Legal obligations are handled under Article 6(1)(c), where applicable.

Image moderation

An automated project classifier checks for flags and sexual content. It may make mistakes; email us to request a review. No decisions with legal or similarly significant effects on people are made.

Accepted images are resized and converted to WebP. Images rejected by the classifier are not added to the map or flag storage.

Retention

Approved images, their places and submission records are kept while published and needed to operate the service. Removing a contribution deletes its active record and stored files.

Technical logs follow infrastructure rotation and deletion cycles and are kept as needed to investigate incidents or abuse. Necessary data may be restricted and retained to address legal obligations or claims. Backups and caches may retain a copy until their next renewal or expiry.

Services and recipients

The project uses hosting and storage infrastructure and Cloudflare for delivery and security. The map loads resources from CARTO and its mapping providers; fonts come from Google Fonts and flag icons from jsDelivr. These requests disclose your IP and connection information to the providers.

IP geolocation and image classification run on project services. Data is not sold or used for behavioural advertising. Approved images are public and may be viewed or downloaded by others.

Sharing buttons only open a social network or the device share menu when you click them. No social network SDKs or tracking are embedded on this page. The network you choose processes the information you decide to share under its own policy.

Some providers may process data outside the European Economic Area. Their policies describe locations and safeguards. Contact the controller for information about providers and applicable safeguards.

Your rights

Email the contact address to request access, correction, deletion, objection, restriction or, where applicable, portability. Identify the data or contribution involved; extra identity information is requested only when necessary.

You may complain to the Spanish Data Protection Authority (aepd.es). Uploading an image is optional; you can browse the map without doing so.