Who is responsible?
openlanddata is a free, ad-free and independent hobby project. Morten Fjord is the operator and data controller.
Questions and personal-data requests can be sent to support@openlanddata.com.
What information do we process?
- For ordinary visits: request metadata and short-lived operational and security logs.
- On the map: your browser requests basemap content directly from OpenFreeMap, which states that it uses no cookies and does not routinely log IP addresses.
- For accounts and sign-in: email address, internal user ID, verification status, sessions, IP address, user agent and security records.
- For exports: selected datasets, areas and formats, job status, quota records, audit events and generated files.
- For bot protection: Cloudflare Turnstile may process IP address, TLS and browser signals, user agent, site key and origin.
- For support: your email address and the correspondence you send us.
- When you choose My location, the browser location is used in memory while the map page is visible. Hiding the page pauses the feature until you resume it. We do not store a GPS route. Ordinary map requests reveal the viewed area. GPS movement does not automatically update the address bar; choosing Share or Copy link includes the current map view without the position dot or tracking.
- When sharing a map: a public preview may show the selected viewport, data layers and location. We do not associate the image with your account.
Purposes and legal bases
We process account and export information to provide the service you request under GDPR Article 6(1)(b). Security, abuse prevention, operational logging and support rely on our legitimate interest in operating a safe and reliable service under Article 6(1)(f).
We do not display advertising, sell personal data, send newsletters, or make automated decisions that produce legal or similarly significant effects.
Providers and transfers
Cloudflare provides infrastructure, database, file storage, email, operational logging and Turnstile and processes information on our behalf. Restricted transfers outside the EU/EEA are covered by Cloudflare's data processing addendum and the EU Standard Contractual Clauses.
Retention
- Sign-in codes are valid for 5 minutes; expired verification records are deleted within 24 hours.
- Sign-in sessions last 7 days and expired rows are removed by daily cleanup.
- Abuse and rate-limit records are deleted 24 hours after last use.
- Generated export files are deleted after 3 days. Export jobs and audit events are deleted after 30 days, and monthly quota records after 62 days. We also retain a daily total of computations, without account, job or area information, for up to 62 days. Deleting an account does not reset this total. A marker with the internal account ID and deletion timestamps prevents requests already in progress from recreating account data. It is removed by daily cleanup seven days after deletion finishes.
- An account and its linked history are deleted after 12 months without a successful sign-in or authenticated export request.
- Support correspondence is deleted within 12 months after the matter is closed unless needed for an active dispute or legal obligation.
- Map previews are retained for up to 90 days and removed by ongoing cleanup. Services where you share the link may keep their own copy under their own terms.
Cookies and local storage
We do not use advertising or visitor-analytics cookies. Browser storage is limited to necessary sign-in and security functionality and your local map layout choices. We therefore do not show a consent banner. We will reassess this if non-essential tracking is introduced.
Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction, object to processing and receive applicable data in a portable format. Contact support@openlanddata.com. You may also complain to the Danish Data Protection Agency (Datatilsynet).
Changes
We will update this notice if our processing changes materially. Version: 2026-09-13-budget-v2.