Privacy policy
1. Controller
The controller responsible for Kaverne is:
Tim Fischer
Email: kaverne.app@gmail.com
2. Overview
Kaverne sets no cookies, embeds no third-party content and offers no user account. The only data processed are the access data that arise for technical reasons, visitor statistics without cookies, the map requests, the place search and whatever you choose to tell us via the report form, by email or via Instagram and Facebook.
3. Visiting the website
When you visit the website, the hosting provider processes technical access data: IP address, time, requested address, browser and operating system. The purpose is to deliver the site and to prevent disruption and abuse; the legal basis is Art. 6 (1) (f) GDPR. These access data are not analysed for statistical purposes; page views are counted by the statistics described in section 11. In the logs visible to Kaverne, these data are deleted automatically after one hour.
The provider is Vercel Inc., USA, with delivery from the Ireland region. A data processing agreement is in place. Vercel is certified under the EU-US Data Privacy Framework; the transfer to the USA is based on the European Commission's adequacy decision of 10 July 2023 (Art. 45 GDPR).
4. Database
Kaverne's content is stored with Supabase, with data held in Ireland; the contracting parties are Supabase Inc. (USA) and Supabase Pte. Ltd. (Singapore). A data processing agreement is in place; the transfer is based on the European Commission's standard contractual clauses (Art. 46 (2) (c) GDPR).
5. Map
The map loads map images from the provider OpenFreeMap (Hyperknot Software Kft., Hungary). The provider may use the Cloudflare service (Cloudflare, Inc., USA) for this. Your IP address is transmitted to the provider because it is needed to deliver the images. No cookies are set. The legal basis is Art. 6 (1) (f) GDPR; the legitimate interest lies in showing the locations.
With the location button on the map you can centre the map on your location. Your browser only asks for permission after you tap it. The location is used only in your browser; it is not sent to Kaverne and not stored. For the area shown, your browser loads the map images from OpenFreeMap; as with every map request, the provider receives your IP address and the requested map area.
The provider's privacy policy: https://openfreemap.org/privacy/
With the search field on the map you can search for a place or an address. When you type, your browser sends the text directly to the search service Photon (photon.komoot.io, operated by komoot GmbH, Germany, based on OpenStreetMap data). The provider receives the search text and your IP address. Kaverne does not receive the search text and does not store it. The legal basis is Art. 6 (1) (f) GDPR. Information from the provider: https://photon.komoot.io/ and https://www.komoot.com/privacy
6. Storage on your device
At most two values are stored: the time of your last report via the report form, so that the same report is not sent several times by mistake, and – after you have chosen a city in the filter – the name of that city, so that it is selected again on your next visit. Neither value contains an identifier or allows conclusions about you. They are only stored as a result of your own action and are necessary for the service you requested. You can delete them in your browser settings.
7. Report form
We process the entry concerned, the reason you selected, your text and – only if you provide it – your email address for follow-up questions. The purpose is to correct the information; the legal basis is Art. 6 (1) (f) GDPR.
To limit mass reports, your IP address is used briefly in memory while the report is being sent. It is not logged and not stored.
Reports are sent by email to Kaverne's mailbox (see section 8) and deleted once they have been dealt with, at the latest after 90 days. The email service provider is Resend (Plus Five Five, Inc., USA), certified under the EU-US Data Privacy Framework; a data processing agreement is in place.
8. Contact by email
If you email Kaverne, your information is processed to deal with your request and deleted once it is no longer needed, at the latest after 12 months. The legal basis is Art. 6 (1) (f) GDPR. The mailbox is operated by Google Ireland Limited, Ireland.
9. Instagram and Facebook
Kaverne has a profile on Instagram (@kaverne.app) and a page on Facebook, both operated by Meta Platforms Ireland Limited, Ireland. When you visit them, Meta processes your data under its own terms: https://privacycenter.instagram.com/policy and https://www.facebook.com/privacy/policy
Meta provides Kaverne with aggregated usage statistics that do not allow conclusions about individual persons. Insofar as this results in joint controllership (Art. 26 GDPR), Meta's addendum applies: https://www.facebook.com/legal/terms/page_controller_addendum
Kaverne processes comments and messages to the profile and the page in order to reply (Art. 6 (1) (f) GDPR).
The links on Kaverne only lead to Instagram or Facebook after you tap them; no data are transmitted there before that.
10. SoundCloud
Kaverne has a profile on SoundCloud (kaverne-599601589). It is operated by SoundCloud Global Limited & Co. KG, Berlin. When you visit it, SoundCloud processes your data under its own terms: https://soundcloud.com/pages/privacy
The link on Kaverne only leads to SoundCloud after you tap it; no data are transmitted there before that.
11. Visitor statistics
Kaverne counts page views with Vercel Web Analytics (for the provider and the data processing agreement, see section 3). For each page view the following are recorded: time, requested address, referring page, approximate location (country, region, city), browser, operating system and device type. No cookies are set. To tell visitors apart, Vercel derives an identifier from the request that is discarded after 24 hours; recognition on later days is not possible, and the IP address is not stored with the statistics. The purpose is to see which pages are used. The legal basis is Art. 6 (1) (f) GDPR. The statistics can be viewed for 30 days. You can object to being counted under Art. 21 GDPR (address above).
12. Your rights
You have the right of access, rectification, erasure, restriction of processing and data portability (Art. 15 to 20 GDPR) and the right to object to processing under Art. 21 GDPR. To exercise them, contact the address above.
Under Art. 77 GDPR you can lodge a complaint with the competent supervisory authority: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz, Hintere Bleiche 34, 55116 Mainz, Germany, poststelle@datenschutz.rlp.de
13. Last updated
13 October 2026