Privacy Policy

Last updated: 24 October 2026

This policy explains what personal data FlatAtlas (flatatlas.app) collects, why, and what rights you have. We collect as little as we can: you can use the map without an account.

Who is responsible

SuperSite s. r. o., Hany Ponickej 4769/18, 841 03 Bratislava – Lamač, Slovakia, company ID (IČO) 51325390, registered in the Commercial Register of the Municipal Court Bratislava III, section Sro, file no. 125831/B.
Contact: support@flatatlas.app

What we collect and why

• Account (only if you sign in): your email address, and if you use Google sign-in, the name and profile picture Google shares. Used to sign you in and to keep your purchase and saved items. Legal basis: contract (GDPR Art. 6(1)(b)).
• Saved places and saved observations (only if you save them): place name, coordinates, elevation, and for observations the time, the selected body and the height model. Stored so you can open them on any device. Legal basis: contract.
• Purchase status: whether your account has Pro, the order (transaction) ID and its status from our payment provider. We never see or store your card details. Legal basis: contract and legal obligations (accounting).
• Your location: if you use “my location”, your browser shares your position with the app only. It is used on your device to calculate the sky and is not sent to us unless you save it as a place.
• Technical data: our hosting provider processes your IP address and request data to deliver the site and protect it from abuse. Legal basis: legitimate interest (Art. 6(1)(f)).

Visit statistics: we use Cloudflare Web Analytics to count page views, countries and referring sites. It uses no cookies, does not store your IP address and does not identify or follow you across sites. Legal basis: legitimate interest in knowing how the site is used.

We do not use advertising or tracking cookies, and we do not sell or share your data for marketing.

Storage in your browser

The app keeps your settings (location, view, layers) and, when you are signed in, your session in your browser’s local storage. This is needed for the app to work and never leaves your device except the session, which is sent to our database provider to prove who you are. You can delete it at any time in your browser settings.

Payments

Purchases are handled by Paddle.com, our reseller and Merchant of Record. Paddle processes your payment and billing details under its own privacy policy and only tells us whether the purchase succeeded and its order ID.

Who processes data for us

• Supabase (database and sign-in), servers in Frankfurt, Germany (EU).
• Cloudflare (hosting, delivery of the website and cookieless visit statistics).
• Paddle (payments, as Merchant of Record).
• Google (only if you choose “Continue with Google”).
• Resend (sending the sign-in email), servers in Ireland (EU).

Some of these providers may process data outside the EU. Where they do, they rely on the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

How long we keep it

Account data, saved places and observations are kept until you delete them or your account. Purchase records are kept as long as accounting law requires. Hosting logs are kept only briefly by the hosting provider.

Your rights

You can ask us for access to your data, its correction or deletion, restriction of processing, data portability, and you can object to processing based on legitimate interest. Write to support@flatatlas.app; we answer within one month. To delete your account and all its data, send the request from the email address of the account.

You also have the right to lodge a complaint with the Slovak data protection authority, Úrad na ochranu osobných údajov Slovenskej republiky, or the authority in your EU country.

Children

FlatAtlas is not intended for children under 16 to create an account or make purchases.

Changes

If we change this policy, we update the date above. Important changes will be announced in the app.