Privacy policy

There are no user accounts, sign-up forms, comments or newsletters. We show no advertising, use no social-media pixels and do not sell data.

To count visits and see which pages are used, every page loads Google Analytics 4 (Google Ireland Ltd.) and Yandex Metrica (Yandex). Both set cookies (names beginning with _ga and _ym, kept for at most 13 months) and receive your IP address, browser and device details, the pages you view and the links you click. Google Analytics runs without Google signals or ad personalisation, and Yandex Metrica without session recording.

The legal basis is our legitimate interest in knowing how the site is used so we can improve it (Art. 6(1)(f) GDPR). You can object at any time: block these cookies in your browser settings or with a content blocker, or use the Google Analytics opt-out add-on and the Yandex Metrica opt-out. Both providers may process the data outside the EU: Google under the EU–US Data Privacy Framework, Yandex in Russia, which has no EU adequacy decision.

Like every website, our server records each request: IP address, date and time, the page requested, the referring page, the browser’s user-agent string and the response code. We use these logs only to keep the site running, find errors and fend off abuse. They are deleted automatically after 14 days.

The legal basis is our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).

The site is delivered through Cloudflare, which acts as a content delivery network and protects it against attacks. Cloudflare processes your IP address and the technical details of each request on our behalf and may set a strictly necessary security cookie. Transfers outside the EU rely on the EU Standard Contractual Clauses and the EU–US Data Privacy Framework.

We only ask for your location when you tap a button such as “Missions near me”, and your browser asks for your permission first. Sorting a list by distance happens on your device. The “near me” button sends your coordinates once, with that request; they are not stored in any database (the request line can appear in the server log, deleted after 14 days).

If you choose a light or dark theme, that choice is kept in your browser’s local storage under the key “pa-theme”. It never leaves your device.

Map tiles are loaded from OpenFreeMap (tiles.openfreemap.org), whose servers receive your IP address to deliver them. Fonts and all other files come from our own server. Links to directions (Google Maps) and to missions’ websites take you to services with their own privacy policies.

If you write to us, we use your address and message only to reply and, where relevant, to correct the data, and delete the correspondence once it is settled, at the latest after 12 months.

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability and to object. Because we hold almost nothing that identifies you, this mostly concerns e-mails you sent us and log lines from the last 14 days. Write to us and we will answer within one month.

You may also lodge a complaint with a data-protection supervisory authority, for example the one in the country where you live.