Privacy
The German version of this notice is the legally binding one.
In short: we only store what the map needs. No accounts, no ads, no tracking, no cookies.
1. Controller
Robin Dillenburg, Kuckucksweg 3, 53332 Bornheim, Germany, e-mail: hallo@kidsnearby.app
2. What we store
When a group is created: type of group, place (name and coordinates), group name, PIN (as a hash only), the e-mail address of the person creating the group, the language they use the site in and the time of their consent.
When a child is added: the name entered, the chosen colour, the point placed on the map, the travel mode, any route points you set and the route to the meeting place computed from them (line, length, duration). Please enter the first name only and place the point roughly: a point near your home is perfectly enough.
We also remember per group when it was last opened (for deletion, see 8). We do not store IP addresses in the database.
3. What for, and on what basis
Entries about children are made by the parents or guardians themselves. The legal basis is their consent (Art. 6 (1) (a) GDPR), given by saving the entry; a note says so right in the input box. Children should not make entries themselves. Everything is voluntary: without a point there is no entry, and without an entry you can still view the map. The person creating a group consents when doing so; we use their e-mail address only for e-mails about their group: the management link (again on request) and a notice before the group is deleted automatically. It is not visible on the map.
The technical operation (map tiles, place search, server logs, protection against abuse) rests on our legitimate interest in a working and secure map (Art. 6 (1) (f) GDPR). There is no automated decision-making and no profiling.
4. Who sees the entries
Whoever has only the link sees the place and the group name. Whoever has the link and the PIN sees all entries and can delete any entry and change any route. Share both only within your group: passing on link and PIN passes on the map. After too many wrong PINs the group is locked for a while.
5. Stored in your browser
Kids Nearby sets no cookies. Your browser’s storage (localStorage, sessionStorage) holds only:
kidsnearby_lang– the chosen languagekidsnearby_session:<group>– the group’s PIN and a session proof, so you don’t have to type it every timekidsnearby_all_routes– whether “all routes” is switched onkidsnearby_created:<group>– only right after creating a group, for the notes on the next page
All four are necessary for the functions you explicitly use them for (§ 25 (2) no. 2 TDDDG, the German cookie law); that is why we don’t ask for consent. You can delete them at any time in your browser’s settings.
6. Third-party services
Map tiles: When the map loads, your browser fetches the map images from openstreetmap.de (FOSSGIS e. V., Germany). That service receives your IP address and the address of our site (without the group link). Basis: Art. 6 (1) (f) GDPR.
Routes: Our server computes the routes to the meeting place via the Google Routes API (Google Ireland Ltd.). Google receives the coordinates of the placed point, the route points and the meeting place, not your IP address and no name. We store the answer (line, length, duration) with the entry.
Place search: When a group is created, our server sends the search text to Photon (komoot GmbH, Germany), or to Google Places (Google Ireland Ltd.) as fallback. Your IP address stays with us.
Demo: The demo map computes routes directly from your browser via Valhalla (FOSSGIS e. V.); that service receives your IP address and the coordinates of the (made-up) demo entries.
Hosting and e-mail: Kids Nearby runs on Cloudflare, Inc. (USA; represented in the EU by Cloudflare Germany GmbH, Munich). The database is held by Cloudflare under EU jurisdiction; the pages themselves are served from the nearest Cloudflare location. When a group is created and when the links are requested again, Cloudflare Turnstile may check that no program is submitting the form. Our e-mails are sent by Resend, Inc. (USA) via its EU region in Ireland.
Third countries: Cloudflare and Resend process data on our behalf (data processing agreements under Art. 28 GDPR). Google processes the coordinates and search terms sent to its Routes and Places APIs as an independent controller under the Google Maps Platform terms (Controller-Controller Data Protection Terms, Google privacy policy). Where data reaches the USA, this is based on the EU-US Data Privacy Framework (adequacy decision of the EU Commission) or the EU standard contractual clauses (Art. 44 ff. GDPR).
Fonts, the map library and all other parts of the pages are served from our own server; no analytics or advertising services are embedded.
7. Server logs
Cloudflare technically logs the IP address, the requested address, the time and the browser identification of each request and keeps these logs for a few days. We use them only to find errors and to fend off abuse (Art. 6 (1) (f) GDPR). The PIN is transmitted in a way that keeps it out of the logs.
8. Retention and deletion
Each child can be deleted directly on the map. The person who created the group deletes the whole group via the management link from the e-mail, and the e-mail address with it. Deleted entries and groups are kept locked for 30 days so that vandalism can be undone, then deleted for good. Groups that have not been opened for twelve months are deleted automatically; about 30 days before, the person who created the group gets an e-mail and can keep it. So that the database can be restored after a technical fault, our database provider (Cloudflare) keeps earlier states of it for up to 30 days; data deleted for good may still be contained there for that long. We make no other backup copies.
9. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection. You can withdraw your consent at any time with effect for the future, most simply by deleting the entry. You can also lodge a complaint with a data protection supervisory authority; the one responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (ldi.nrw.de). Write to us at hallo@kidsnearby.app.