Privacy Policy

Controller

Name

Valentin Jaymond

Trading as

Okapi Compass

Address

Neckarstr. 14, 76275 Ettlingen, Germany

Privacy contact

privacy@okapicompass.com

Personal data we process

• Account data

  Email address, user ID, username or profile name, authentication data, account settings.

• Profile and community data

  User tag, avatar where applicable, saved places, submitted places, contribution history.

• Submitted content

  Place names, descriptions, ratings, categories, coordinates, practical information, photos or images where uploads are enabled.

• Communication data

  Messages sent to our contact addresses (hello@, support@, legal@, privacy@, report@).

• Technical data

  IP address, browser and device information, server logs, security logs, timestamps, error logs.

• Map and location-related data

  Map interactions or requests necessary to display Mapbox maps. Okapi Compass does not track live user location.

Purposes of processing

• operating the website and its core features
• creating and managing user accounts
• authentication, password reset and session management
• allowing users to submit, save and manage places
• reviewing and moderating community submissions
• displaying maps and place information
• responding to support, privacy, legal and report requests
• securing the service and preventing abuse
• complying with legal obligations
• improving the reliability and quality of the service

Legal bases

Depending on the specific processing activity, we process personal data on the basis of contractual necessity, legitimate interests, consent where required, and legal obligations. We rely on our legitimate interest in understanding aggregate site usage for Vercel Web Analytics, described further under "Analytics" below. Marketing tracking, advertising technologies, or analytics that identify individual visitors will only be used with prior consent if introduced in the future.

Service providers

We use the following service providers to operate Okapi Compass. Each provider may process some personal data as part of their service.

• Supabase

  Authentication, database, user accounts, place submissions, saved places, file storage (place images), and email delivery via Supabase Auth. Supabase may process data in the United States and the European Union.

• Vercel

  Hosting, deployment and serverless functions. Vercel may collect technical and server log data as part of operating the infrastructure. Vercel also provides Vercel Web Analytics, described further under "Analytics" below.

• Mapbox

  Map display and map-related API requests. When the map is displayed, Mapbox may receive technical data such as IP address, device and browser information, map tile requests and limited map interaction data necessary to provide and improve the map service. Mapbox is used as a functional map provider only. Okapi Compass does not use Mapbox for marketing tracking.

• Google Workspace

  Business email and internal communication for addresses such as hello@, privacy@, legal@ and support@.

• Google Cloud Translation

  Automatic translation of place-submission and published-place narrative content between English, French and German, provided by Google Cloud Translation (Google Cloud / Google LLC) — a distinct service from Google Workspace. Only a place's four narrative fields (what makes it special, why it stays quiet, access and logistics, and ideal conditions) are sent for translation. When a place is submitted, the two languages the contributor didn't write in are generated automatically to support moderation and publication, while the contributor's original-language text is preserved unchanged. Machine-generated translations are never published automatically — they require explicit admin review, and a place is only published once its required translations have been reviewed. Okapi Compass configures Cloud Translation Advanced through Google's EU endpoint (translate-eu.googleapis.com, location europe-west1); Google states that submitted text is used only to provide the Cloud Translation service, is held briefly in memory to perform the translation, and is not made public or shared with third parties.

International transfers

Some service providers may process data outside the European Economic Area. Where required, appropriate safeguards such as data processing agreements, standard contractual clauses or other lawful transfer mechanisms are used.

Cookies and similar technologies

Analytics

Data retention

We keep personal data only as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account data is kept for the duration of the account. Upon deletion, data is removed or anonymised subject to legal retention requirements.
• Submitted places may remain published unless removed, anonymised or deletion is requested and legally possible.
• Technical and security logs are kept for limited periods consistent with operational and security needs.
• Communication requests are kept as long as needed to handle the request and document the response.

Your rights

Depending on applicable law, you may have the right to:

• access the personal data we hold about you
• request rectification of inaccurate data
• request deletion of your personal data
• request restriction of processing
• data portability where processing is automated and based on consent or contract
• object to processing based on legitimate interests
• withdraw consent at any time where processing is based on consent
• lodge a complaint with a competent supervisory authority

To exercise your rights, contact us at privacy@okapicompass.com. You also have the right to lodge a complaint with a competent data protection supervisory authority, for example the authority responsible for Baden-Württemberg, Germany.

Account deletion and data requests

You can request deletion of your account or personal data by contacting privacy@okapicompass.com. Some data may be retained where necessary for legal obligations, security, abuse prevention, dispute resolution or proof of consent.

Children

Okapi Compass is not directed at children. If we become aware that a child has provided personal data without appropriate permission, we will take appropriate steps to delete or restrict the data.

Changes to this Privacy Policy

We may update this Privacy Policy as Okapi Compass develops. The latest version will always be available on this page.