Privacy policy

Who is responsible

The data controller is Alexandre Duarte (Spain), [email protected]. The site has no user accounts, no ads and no advertising trackers.

Your location

If you allow it, your browser gives the site your position to show the nearest smoking areas and the local rules. It is used on your device only: it is never sent to us or stored.

When you send a contribution, only your distance to the place (in metres) is sent, not your position.

Contributions

When you confirm or correct a place, we store your answer, your distance to the place, the time, and an optional nickname you choose. To recognise repeat contributions without knowing who you are, your device creates a random identifier, which our database turns into a keyed hash before storing it.

Purpose: keeping the information accurate (legitimate interest). Contributions are kept as long as they are useful to the place's history; you can ask us to delete yours.

Statistics

We count visits with Umami (Umami Software, Inc., United States), without cookies and without building a profile: pages viewed, the site you came from, country, device type and a few actions (for example « Go there », a contribution sent, or whether location was allowed). It never receives your position. Cloudflare Web Analytics, also without cookies, measures page views and loading speed. Browsers set to « Do Not Track » are not counted. Purpose: knowing whether the site is useful (legitimate interest).

We also keep an anonymous daily count of views per place.

Stored on your device

A « lang » cookie (one year) remembers your language. The site also keeps on your device, in its local storage: an offline copy of the smoking areas, your city, your filters, whether you allowed the location, your contribution identifier and nickname, and a visit count used for the donation prompt. These stay on your device and you can clear them in your browser settings. No consent is needed for these strictly functional items.

Hosting and transfers

Our hosts process technical data such as your IP address to deliver the site and protect it: Cloudflare (United States) and Supabase (servers in Japan, a country recognised by the European Commission as providing adequate protection). Transfers to the United States rely on the safeguards offered by these providers under their terms.

Donations are handled by PayPal under its own privacy policy; we never see your payment details.

Your rights

You can ask for access to, correction or deletion of your data, object to or restrict its processing, by writing to [email protected]. You can also complain to the Spanish data protection authority (Agencia Española de Protección de Datos, www.aepd.es).