Privacy policy

1. Controller

Confirmed service address: Rua 8 n.º 589, 4500-370 Espinho, Portugal. Full legal name and direct privacy email will be added after confirmation. A data protection officer will be listed only if appointed or legally required.

2. Current scope

Find WC Now currently has no accounts, advertising, user profiles or automated decisions with legal or similarly significant effects. Google Analytics 4 uses measurement ID G-3T4072VR8H in advanced consent mode. Analytics storage is denied before your choice; full measurement starts only after consent.

3. Hosting and security logs

The preview runs on Cloudflare Pages. A visit may process IP address, time, requested URL, browser/device details, referrer and security events for delivery, abuse prevention and debugging. Where applicable, the basis is GDPR Art. 6(1)(f): secure and reliable delivery.

Cloudflare may act as service provider and for its own security/network purposes. International processing follows the actual Cloudflare contracts and safeguards. No specific log-retention period is claimed until verified for the final account.

4. GPS and location

Location is requested only after your action and browser permission. Exact coordinates are used on-device to rank distance and centre the map and are not sent to a Find WC Now server. Revoke permission in browser or OS settings.

Centring the map loads tiles, from which the map provider can infer the approximate visible area.

5. OpenStreetMap and Nominatim

Map tiles and place search are requested directly from OpenStreetMap Foundation services. They may process IP, time, browser/device, referrer, visible area and, when searching, your query with a Vienna constraint. Search does not automatically send your GPS position.

OSMF describes infrastructure in the UK and Netherlands and a global CDN. Its own privacy policy applies.

6. Google Maps and email

Google Maps opens only after your click and receives the selected toilet destination; further data depends on browser, device, Google account and permissions. A report draft is created on-device. Find WC Now does not store or send it; after sending, your email provider and MA 48 process content and contact data.

7. Local storage and PWA

The browser may store language, search cache, install status, privacy choice and offline resources. A service worker may show an older app/data version. Exact keys and periods are listed on Cookies and local storage.

8. Analytics and Search Console

Google Analytics 4 loads in advanced consent mode with Analytics and advertising storage denied by default. Before consent, Find WC Now does not set or read Analytics cookies; Google may still receive cookieless measurement signals including consent state, timestamp, browser/user agent, referrer, page URL and a random number per page load. Full Analytics measurement with usage events and pseudonymous identifiers begins only after consent. Refusal does not block core functions.

Change your choice at any time through “Privacy settings”. Advertising and ad-personalisation remain disabled and Analytics cookie lifetime is capped at twelve months. The legal basis and international transfer of cookieless signals require legal review before broader promotion.

A future Search Console verification meta tag alone sets no visitor cookie and loads no visitor script.

9. Grounds, recipients and retention

Necessary operations deliver the requested service or support legitimate security/function interests; optional measurement would rely solely on consent. Recipients, when used, are Cloudflare, OSMF, Google after your click and, if you send a report, your email provider and MA 48.

Local periods appear in the storage inventory. External providers apply their own periods. Data is not kept longer than needed for purpose or law; unverified periods must be completed before launch.

10. Rights and complaints

Subject to legal conditions, you may request access, correction, erasure, restriction, portability, object and withdraw consent prospectively. A direct contact will be added before launch.

For a controller established in Portugal, CNPD is particularly relevant. You may also complain to a legally competent authority where you live/work or where the alleged breach occurred; in Austria, the Austrian Data Protection Authority.

11. Children, security and changes

The service is not directed specifically to children and does not ask for sensitive details. Do not include unnecessary personal data in reports. Reasonable safeguards reduce but cannot eliminate all risk.

Changes will be published with a new version and date. Version: 29 August 2026.