Privacy, plainly.

Who is responsible?

Controller: Ophelin — Inh. Alperen Öztürk. Address: Josef-Felder-Str. 15, 81241 Munich, Germany. Privacy contact: support@ophelin.com. This notice describes the current processing inventory and is updated when purposes or providers change.

Browsing and hosting

Cloudflare hosts the app and processes connection data, including your IP address, requested URL, time and browser information, to deliver and protect the service. Our application database does not store raw IP addresses.

The application database uses Cloudflare D1 with the EU jurisdiction setting, which restricts where that database runs and stores its data. This does not restrict who can use the app, and it does not keep Worker request processing or all Cloudflare services inside the EU. Cloudflare may process connection, security-log and backup data outside the EEA under its applicable data-processing terms and the account settings.

Your passport and saved choices

A successful check-in creates a random, HttpOnly visitor cookie for the 30-day visit-history window. The active current-stop context expires at 23:00 Berlin time by default; Käfer Wiesn-Schänke and Kufflers Weinzelt use the official 01:00 late-hours exception. The server stores a keyed hash, tent, edition, active-stop expiry and timestamp. No name or email is needed. This is pseudonymous personal data, even though the app calls the experience anonymous. Passive browsing and history reads do not create this cookie.

We use this information only to provide the visit history and saved-feature service you request. Favorites, comparisons and visit preferences stay in browser storage until you remove them or clear site data.

Community entry reports

Reports contain a tent, time, entry state, crowd level and wait bucket. A 30-minute reporter cookie is combined with transient network/browser hints and hashed to limit repeat reports. Reports and visits use separate identifiers. Public responses contain aggregate conditions, not your identity or personal history.

These short-lived signals help keep reports useful and limit abuse. Reports influence the live signal for 30 minutes; deletion follows the retention period below.

Location and recommendations

Location is optional and starts only when you ask. Browser permission is requested separately. Coordinates are used in memory for the map marker and nearest tent, then discarded; they are not sent to our server. A derived nearest-tent slug may be sent for recommendations. Manual selection always works. You can stop using location and revoke browser permission at any time.

Recommendations use bounded preferences, tent context and available visit history. We do not continuously track location, build an advertising profile or sell data.

Retention and deletion

Application reports are eligible for deletion after 24 hours. Visit history is retained for 30 days; the active current-stop context ends at its explicit Berlin-local same-day cutoff: 23:00 by default, or 01:00 for Käfer Wiesn-Schänke and Kufflers Weinzelt. The retention job removes eligible records; API traffic also runs a cleanup safety net. Short-lived live status expires after 30 minutes. The deployment keeps invocation logs off, redacts query strings and keeps traces off; only fixed diagnostic and aggregate retention messages are emitted by the app.

Local favorites and plans have no automatic expiry; remove them in My Fest, with the controls below, or in your browser. The privacy-choice record expires after 180 days. Your device may retain normal HTTP caches. Provider backups and security logs, if enabled in the Cloudflare account, can outlive application-row deletion and are handled under the provider’s retention settings.

Analytics, advertising and external links

No analytics or advertising provider is configured. Analytics dispatch and tag-manager forwarding are disabled. Both banner choices currently save only necessary settings. We do not collect advance consent for future vendors.

Fonts, icons, illustrations and the drawn map are served by this app. Clicking an official-site or directions link opens that provider; it receives ordinary connection data under its own privacy policy. Directions use the destination address, not your GPS coordinates.

Your rights and contact

You may request access, correction, deletion, restriction and portability where applicable, and object to processing based on legitimate interests. You may withdraw consent at any time without affecting earlier lawful processing. Contact the controller above. Requests are generally answered within one month; lawful extensions and identity checks may apply.

If cookies or other device identifiers are lost, some records can no longer be linked to you. We do not collect additional identity data for this purpose. You can complain to a data-protection supervisory authority, especially where you live, work or believe an infringement occurred. For this Bavarian sole proprietorship, the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, poststelle@lda.bayern.de, +49 981 180093-0, is the relevant private-sector supervisory authority.