Privacy

Last updated: 21 October 2026

This notice describes how wobillig processes personal data when you visit the site, search, submit contributions, upload photos or support the project.

1. Controller and contact

Please contact team@wobillig.ch about privacy, access, corrections or deletion.

2. Hosting and security

Vercel (USA) delivers the site, runs its server functions and stores community data in a private Vercel Blob store. Requests involve IP addresses, time, requested URLs and browser or device information. Vercel also processes technical data for delivery, troubleshooting, firewall rules and protection against attacks.

To limit repeated submissions, wobillig stores keyed pseudonymous identifiers derived from IP addresses or browser identifiers, together with counters and timestamps. These are not published. A pseudonymous identifier is not the same as anonymous data. The application’s contribution store does not retain raw IP addresses; this does not exclude provider access or security logs.

3. Maps, location and search

Map tiles are loaded directly from the OpenStreetMap Foundation (United Kingdom, distributed infrastructure). The service receives your IP address and the requested map area. Your precise device location is requested only after you select the location button and give your browser permission. wobillig uses it in your browser to centre the map and calculate distances; the resulting map view still generates tile requests.

Address suggestions send your search text and technical connection data directly to geo.admin.ch / swisstopo (Switzerland). Custom-map place searches send the search text and selected city through our server to Photon / komoot (Germany); your browser IP is not deliberately forwarded. Search results may remain in server memory for five minutes. Google venue ratings are requested by our server from Google (Ireland/USA) using venue details, without forwarding your device location or browser IP. Opening an external source or Google Maps link connects you to that provider.

4. Community contributions and shared maps

We store submitted prices, venue information, corrections, sources, timestamps and review history to provide and maintain the comparison. Valid prices, new venues and corrections are published directly after automated checks. Unusual price changes may be held for review; reviewers can access those pending contributions. Published content is publicly accessible and can be downloaded.

Custom maps store their name, entries, sharing identifier and a pseudonymous owner identifier. Anyone who knows a sharing link can view the map; it is not confidential storage. Approved maps may also be listed publicly. Coffee ratings retain the score, venue, pseudonymous voter identifier, photo fingerprint and time; only counts and, from three votes, the average are published.

5. Photo uploads and AI processing

When you upload a menu or coffee photo, we send the prepared image and details of the selected venue to Anthropic (USA) through its API to extract prices or check the photo. Please avoid photos containing people or unnecessary personal information.

wobillig does not permanently store the uploaded image. It retains extracted offers or rating information, verification results and photo fingerprints to prevent duplicate processing or misuse. The Anthropic API generally deletes inputs and outputs within 30 days; its stated exceptions include safety enforcement and legal obligations. Provider processing is separate from wobillig’s own storage.

6. Usage statistics

We use Vercel Web Analytics (USA) and GoatCounter (operator in Ireland; storage in Germany and Finland) to understand usage and improve the site. Statistics include page views, referring pages, device/browser information and approximate location derived from an IP address. These analytics services do not use analytics cookies for site visitors. Their privacy notices describe how requests are converted into aggregate statistics.

Vercel also receives selected events such as category changes, completed contributions and data downloads, with city and interface language. We do not attach form contents, uploaded images or email addresses to these events. On the interactive map, our Vercel integration removes query parameters and URL fragments from the reported page URL.

7. Cookies and browser storage

• wobillig-browser: signed browser identifier for contributions, map ownership and abuse prevention; valid for up to one year.
• wobillig-price-view: allows you to see your own pending price entries; valid for up to one year.
• Local browser storage retains your theme preference, up to eight selected search results per city and saved custom-map references until you remove them. Session storage remembers dismissed support invitations during a tab session.

You can remove cookies and local storage in your browser settings. Doing so can remove access to editing maps and viewing pending submissions. Payment providers may use additional storage when you open a payment.

8. Voluntary support payments

When you open a payment, Stripe (Ireland/USA) loads its payment interface. Stripe and the selected payment method, such as TWINT or your card provider, process payment and billing details, technical data and fraud-prevention information. Payment fields are supplied by Stripe; wobillig does not receive your full card number. We can access transaction details needed for payment administration and accounting. Stripe is also loaded when you return to the site to check a payment’s status.

9. Email contact and planned verification

Emails to team@wobillig.ch are processed through Infomaniak (Switzerland). We use your address and message to handle your request.

Email verification is currently disabled. The prepared verification process will use Infomaniak to send a code valid for ten minutes. The contribution store will retain a keyed email identifier rather than the plain email address; the mail service processes the recipient address for delivery. A successful verification will create a wobillig-account cookie valid for 30 days. Verification does not subscribe you to a newsletter.

Cloudflare Turnstile (USA) is active for spam protection. When you submit a contribution, the security check processes technical browser and connection information. Our server validates the result before saving the contribution. Reading the map does not require this check.

10. Countries and safeguards

The providers and countries described above include processing outside Switzerland, notably in the USA. International providers also use infrastructure and subprocessors in other countries; their notices provide further details. The Vercel data-processing terms and Anthropic data-processing terms contain standard contractual clauses and provisions for Swiss data protection for relevant transfers. Stripe explains its safeguards in its data transfer terms. These safeguards do not make foreign processing risk-free.

11. Retention and your rights

Public contributions, maps, reviews and owner identifiers have no automatic deletion period at present; they remain to operate the service and document changes. Rate-limit counters and menu-scan receipts cease to apply after their respective short windows, generally ten minutes to 24 hours; expired records are cleaned up on later writes, rather than by a scheduled deletion job. Browser-cookie lifetimes are listed above. Backups may contain previous versions.

We retain correspondence as needed to handle the matter and any applicable legal obligations. Payment records may be subject to statutory retention duties. Provider logs and analytics are subject to the providers’ retention rules.

Under applicable law you may request access, correction or deletion, and exercise other data-protection rights. Write to team@wobillig.ch with enough information to identify the relevant contribution or map. We may need to verify your identity and explain any legal reasons for retaining records. You can revoke location permission in your browser and contact the Swiss Federal Data Protection and Information Commissioner.