Privacy, plainly.

Who is responsible?

Controller: Ophelin — Inh. Alperen Öztürk. Address: Josef-Felder-Str. 15, 81241 Munich, Germany. Privacy contact: support@ophelin.com. This notice describes the current processing inventory and is updated when purposes or providers change.

Browsing and hosting

Cloudflare hosts the app and processes connection data, including your IP address, requested URL, time and browser information, to deliver and protect the service. Our application database does not store raw IP addresses.

The application database uses Cloudflare D1 with the EU jurisdiction setting, which restricts where that database runs and stores its data. This does not restrict who can use the app, and it does not keep Worker request processing or all Cloudflare services inside the EU. Cloudflare may process connection, security-log and backup data outside the EEA under its applicable data-processing terms and the account settings.

Your passport and saved choices

A successful check-in creates a random, HttpOnly visitor cookie for the 30-day visit-history window. The active current-stop context expires at 23:00 Berlin time by default; Käfer Wiesn-Schänke and Kufflers Weinzelt use the official 01:00 late-hours exception. The server stores a keyed hash, tent, edition, active-stop expiry and timestamp. No name or email is needed. This is pseudonymous personal data, even though the app calls the experience anonymous. Passive browsing and history reads do not create this cookie.

We use this information only to provide the visit history and saved-feature service you request. Favorites, comparisons and visit preferences stay in browser storage until you remove them or clear site data.

Community entry reports

Reports contain a tent, time, entry state, crowd level and wait bucket. An anonymous reporter cookie can link your contributions on this device for up to two years so My Fest can show your history and later editions can learn from the data. Reports and visits use separate identifiers. Public responses contain aggregate conditions, not your identity or personal history.

These bounded signals help keep reports useful and limit abuse. Reports influence the live signal for 30 minutes; the records remain available for historical analysis until the retention period below.

Location and recommendations

Location is optional and starts only when you ask. Browser permission is requested separately. While the map is open, the browser may listen for movement so the approximate marker and nearest tent can update; you can stop that session at any time. Coordinates are used in memory and discarded; they are not sent to our server, stored, or used after you leave the map. A derived nearest-tent slug may be sent for recommendations. Manual selection always works, and you can revoke browser permission in your browser settings.

Recommendations use bounded preferences, tent context and available visit history. We do not track location in the background, build an advertising profile or sell data.

Retention and deletion

Application report records are eligible for deletion after up to 730 days, with cleanup on the next hourly run. They influence live entry guidance for only 30 minutes. Visit history is retained for 30 days; the active current-stop context ends at its explicit Berlin-local same-day cutoff: 23:00 by default, or 01:00 for Käfer Wiesn-Schänke and Kufflers Weinzelt. API traffic also runs a cleanup safety net. The deployment keeps invocation logs off, redacts query strings and keeps traces off; only fixed diagnostic and aggregate retention messages are emitted by the app.

Local favorites and plans have no automatic expiry; remove them in My Fest, with the controls below, or in your browser. The privacy-choice record expires after 180 days. Your device may retain normal HTTP caches. Provider backups and security logs, if enabled in the Cloudflare account, can outlive application-row deletion and are handled under the provider’s retention settings.

Analytics, advertising and external links

Google Analytics 4 is an optional analytics provider. It loads only after you explicitly allow Usage analytics. We send page views and bounded product events such as guide, tent, matcher, comparison, map, check-in, report and Where next? actions. We do not send account identity, raw GPS or report identity, and we do not create a user ID. Google processes the permitted analytics data under its own terms and privacy information. Advertising, remarketing and Google Ads conversion tags are not active; they require a separate future purpose, notice and choice.

Fonts, icons, illustrations and the drawn map are served by this app. Clicking an official-site or directions link opens that provider; it receives ordinary connection data under its own privacy policy. Directions use the destination address, not your GPS coordinates.

Your rights and contact

You may request access, correction, deletion, restriction and portability where applicable, and object to processing based on legitimate interests. You may withdraw consent at any time without affecting earlier lawful processing. Contact the controller above. Requests are generally answered within one month; lawful extensions and identity checks may apply.

If cookies or other device identifiers are lost, some records can no longer be linked to you. We do not collect additional identity data for this purpose. You can complain to a data-protection supervisory authority, especially where you live, work or believe an infringement occurred. For this Bavarian sole proprietorship, the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, poststelle@lda.bayern.de, +49 981 180093-0, is the relevant private-sector supervisory authority.