Privacy

Data controller

Website and usage statistics

Vercel hosts the website. When you visit, information including your IP address, the requested address, the time and browser information is processed to deliver the pages and secure the operation of the website.

Vercel Web Analytics collects page views, referring pages, device and browser data, and an approximate region for aggregated usage statistics. The service does not use tracking cookies for this purpose. According to Vercel, the visitor identifier generated from request data is discarded after 24 hours. This is not a deletion period for all operational logs.

• Vercel privacy notice
• Privacy in Vercel Web Analytics

Account and favourites

The public place search can be used without an account. When you register or sign in, Supabase processes your email address, your password for authentication, and technical session and sign-in data. Favourites are associated with your account and stored in the database. The selected database region is Frankfurt, Germany.

Sign-in cookies keep your session active. Email sign-in links also require a temporary verification value in the original browser. You can remove favourites yourself; for access to information, corrections or deletion of your account, contact us at the email address above.

• Supabase privacy notice

AI trip advisor

When you use the trip advisor, we send your message, the wishes extracted from it and selected public place information directly to Anthropic for processing with Claude. Your email address, account ID, sign-in data, private lists and device location are not added to the context. Free text can still contain personal information; please avoid entering it.

Our app keeps the conversation only in this tab’s memory, until you reload, start again, leave the advisor or sign out. A signed short context is valid for at most two hours. To prevent abuse and limit costs, we store account and request identifiers, time, model, status and costs, without chat text. Request records older than seven days and daily/monthly counters older than 90 days are deleted daily. Account deletion removes related records; the anonymous monthly total remains until its regular deletion.

Anthropic also processes data in the United States. Its standard API policy deletes inputs and outputs within 30 days, with exceptions particularly for abuse checks and legal obligations. No zero-retention arrangement has been agreed for this connection.

• Anthropic data retention

Account emails and contacting us

Confirmation and password emails are sent through Brevo. The recipient address, message content, and technical sending and delivery data are processed for this purpose. Brevo states that its databases are stored in the EU, including France and Germany. Account emails are in German.

If you write to the Gmail address above, we process your sender address, the message content and any attachments to handle your enquiry. Google is involved as the email provider. A contact link opens your email application; clicking it alone does not send a message.

• Brevo data storage locations (in German)
• Google privacy notice

Maps and optional location sharing

Maps are loaded from Mapbox as soon as a map view is displayed. Mapbox receives information including your IP address, browser information and requests for the area of the map being displayed. Technical usage data may also be sent to Mapbox.

We only request your precise device location when you activate the location feature and the browser permits its use. The app temporarily keeps the coordinates in working memory to calculate distances and position the map; the app does not add them to your account or a database. The areas of the map being displayed may still allow your location to be inferred. You can revoke location permission in your browser.

• Mapbox privacy notice

Photos, videos and external links

Place photos and preview images are delivered in resized versions through our hosting provider Vercel. To do so, Vercel retrieves the originals from our Supabase storage or from YouTube image servers (i.ytimg.com) and caches the resized versions. Your browser loads these images from derpraktikant.io and does not connect to Supabase or YouTube itself; the processing by Vercel described above under “Website and usage statistics” applies. If an image exceptionally comes from another source, your browser loads it directly from that provider, which then receives information including your IP address and the image request.

YouTube videos are only embedded after you click the play button. Before that, the page only shows a preview image delivered as described above, without connecting to YouTube. We use youtube-nocookie.com. When a video plays, YouTube/Google receives connection and usage data; privacy-enhanced mode does not prevent every transfer of data.

Directions, SBB, source and website links lead to external providers. After you grant location permission, a Google Maps directions link may include your current coordinates as the starting point and send them to Google when opened. The SBB link contains the destination and language. The respective privacy notices apply on the destination websites.

• Google/YouTube privacy notice

Browser storage

In addition to sign-in cookies, your language choice is stored in a cookie. The app uses the browser’s session storage to return to the swipe view and resume a favourites action. Mapbox also uses local browser storage, including for a random identifier and timestamps relating to map usage. Search and filter values may appear in the page address. You can delete website data in your browser settings; this may reset your sign-in and saved views. Fonts are served directly with the website.

Recipients and processing abroad

In addition to the operator, the service providers mentioned above may receive data for the purposes described. The database region being Germany does not mean that all services operate exclusively there: Vercel, Mapbox and Google operate internationally, particularly in the United States; Supabase is based in Singapore. Services operated worldwide may involve further processing locations.

You can find information about processing locations and the safeguards described by the providers in the linked privacy notices. For information about the recipients and safeguards used in our operation, you can contact us directly.

Retention and your rights

Account data and favourites remain stored for the account functionality until they are removed or the account is deleted. For contact enquiries and technical logs, retention depends on the purpose of processing, the settings of the respective services and any applicable legal retention requirements. There is no single website-wide deletion period for this data.

You can request information about your data, its correction or deletion, and withdraw any consent you have given with effect for the future. Depending on the applicable law, further rights may exist, such as the right to receive your data or to object. To do so, contact us at the address above. You can also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC).

• Information about your rights from the FDPIC (in German)