Privacy notice

Who is responsible

The service is operated by Ivan Furčić, Croatia, as the data controller. You can reach us at ifurcic@gmail.com.

If you read a guest guide

Guest pages need no account and set no advertising or analytics cookies. We do not use analytics or tracking.

When you open a page, our hosting provider receives the technical data every web request carries (IP address, browser type, requested page, time) and keeps it in standard server logs for security and troubleshooting.

If you save places, that list is stored only in your own browser (local storage) and never sent to us. If you tap “Use my location” on the map, your browser asks for permission and the position is used only in your browser to show where you are; it is not sent to our servers.

If you sign in as a property owner

Owners sign in with a Google account. Sign-in is brokered by Amazon Cognito, and we receive your name, e-mail address and a Google account identifier. We store these together with your role and the properties assigned to you.

While you manage a guide we record an audit trail of changes (who changed what and when) so that published content can be traced. Photos you upload are checked, re-encoded and stripped of embedded metadata such as camera location before they are stored.

Contact details you enter are shown to guests only for the fields you explicitly switch on. We never store Wi-Fi passwords or door codes.

Cookies

Guest pages set at most one functional cookie, NEXT_LOCALE, and only when you change the language, so the site remembers your choice.

Signed-in owners also get a session cookie (valid 12 hours) and, while previewing an unpublished draft, a preview cookie (valid 30 minutes). None of these are used for advertising or shared with third parties.

Service providers

The service runs on Amazon Web Services in the Frankfurt region (EU): hosting, database, photo storage and delivery, sign-in (Amazon Cognito) and map tiles (Amazon Location Service). When the map loads, your browser requests tiles from AWS, which sees your IP address.

Google processes your sign-in when you choose “Continue with Google”. Links such as “Directions” open Google Maps or third-party websites, whose own privacy policies apply.

How long we keep data

Owner accounts and the audit trail are kept while the account exists and deleted on request. Server logs are kept for a short period for security purposes. Published guide content stays online as long as the owner keeps it published.

Your rights

Under the GDPR you may ask for access to your data, correction, deletion, restriction, portability, or object to processing. Write to us at the address below. You may also complain to the supervisory authority; in Croatia this is the Personal Data Protection Agency (AZOP).

Children

The service is not directed at children and we do not knowingly collect data from them.

Changes to this notice

We will update this page when the service changes. The date at the top shows the current version.

Contact

Questions about privacy: ifurcic@gmail.com.