Privacy policy

1. Controller

Controller under the GDPR: Pedro Teixeira, sole trader in Portugal, Rua 8, n.º 589, 4500-370 Espinho, Portugal. Privacy contact: info@findwcnow.com. No data protection officer is appointed, and none is legally required.

2. Current scope

Find WC Now currently has no accounts, advertising, user profiles or automated decisions with legal or similarly significant effects. Google Analytics 4 uses measurement ID G-3T4072VR8H in advanced consent mode. Analytics storage is denied before your choice; full measurement starts only after consent.

3. Hosting and security logs

The preview runs on Cloudflare Pages. A visit may process IP address, time, requested URL, browser/device details, referrer and security events for delivery, abuse prevention and debugging. Where applicable, the basis is GDPR Art. 6(1)(f): secure and reliable delivery.

Cloudflare may act as service provider and for its own security/network purposes. International processing follows the actual Cloudflare contracts and safeguards. No specific log-retention period is claimed until verified for the final account.

4. GPS and location

Location is requested only after your action and browser permission. Exact coordinates are used on-device to rank distance and centre the map and are not sent to a Find WC Now server. Revoke permission in browser or OS settings.

Centring the map loads tiles, from which the map provider can infer the approximate visible area.

5. OpenStreetMap and Nominatim

Map tiles and place search are requested directly from OpenStreetMap Foundation services. They may process IP, time, browser/device, referrer, visible area and, when searching, your query with a Vienna constraint. Search does not automatically send your GPS position.

OSMF describes infrastructure in the UK and Netherlands and a global CDN. Its own privacy policy applies.

6. Google Maps and email

Google Maps opens only after your click and receives the selected toilet destination; further data depends on browser, device, Google account and permissions. A report draft is created on-device. Find WC Now does not store or send it; after sending, your email provider and MA 48 process content and contact data.

7. Local storage and PWA

The browser may store language, search cache, install status, privacy choice and offline resources. A service worker may show an older app/data version. Exact keys and periods are listed on Cookies and local storage.

8. Analytics and Search Console

Google Analytics 4 is loaded only after explicit consent. Without consent the Google script is never requested, no Analytics cookies are set or read, and nothing reaches Google — not even cookieless measurement signals. Only after consent does measurement begin, with usage events and pseudonymous identifiers, on the basis of GDPR Art. 6(1)(a) and Austrian TKG § 165. Refusing leaves every core function unchanged.

Change your choice at any time through “Privacy settings”. Advertising and ad-personalisation remain disabled and Analytics cookie lifetime is capped at twelve months. The legal basis and international transfer of cookieless signals require legal review before broader promotion.

A future Search Console verification meta tag alone sets no visitor cookie and loads no visitor script.

9. Grounds, recipients and retention

Necessary operations deliver the requested service or support legitimate security/function interests; optional measurement would rely solely on consent. Recipients, when used, are Cloudflare, OSMF, Google after your click and, if you send a report, your email provider and MA 48.

Local periods appear in the storage inventory. External providers apply their own periods. Data is not kept longer than needed for purpose or law; periods that have not been verified are not claimed.

10. Rights and complaints

Subject to legal conditions, you may request access, correction, erasure, restriction, portability, object and withdraw consent prospectively. Write to info@findwcnow.com.

For a controller established in Portugal, CNPD is particularly relevant. You may also complain to a legally competent authority where you live/work or where the alleged breach occurred; in Austria, the Austrian Data Protection Authority.

11. Children, security and changes

The service is not directed specifically to children and does not ask for sensitive details. Do not include unnecessary personal data in reports. Reasonable safeguards reduce but cannot eliminate all risk.

Changes will be published with a new version and date. Version: 22 October 2026.