Privacy
Last updated 7 August 2026.
The short version. No account, no cookies, no advertising, and nothing you draw is stored. There is one analytics tool, counting page views and load times. It sets no cookies and does not follow you to other sites.
Who is responsible
D-Tour is run by an individual in Sweden and is the data controller for the processing described here. Contact: zacken@me.com.
What is processed, and why
| Data | Why | Kept? |
|---|---|---|
| Your IP address | Rate limiting and abuse prevention. Legitimate interests, Art. 6(1)(f) GDPR. | In memory only, seconds. Never written to disk. |
| Start point and distance | Generating the route you asked for. Art. 6(1)(b). | No. Not stored, not logged, not linked to you. |
| Search text | Finding the place you typed. | Sent to Photon, see below. Not stored by us. |
| Page views and load times | Knowing whether the site is being used and whether it is slow. Legitimate interests, Art. 6(1)(f) GDPR. | Aggregated by Vercel Analytics. No cookies, no cross-site tracking, no profile. |
| Device location | Only if you press the locate button and allow it in your browser. Art. 6(1)(a), consent. | Not stored. It becomes your pin, and the pin is sent to our server when you draw a route. |
There is no database. The route server keeps no request log containing your address, and the web server in front of it is configured without an access log. Analytics is counted at the hosting layer and is separate from the route service, which never sees it.
Cookies
D-Tour sets no cookies at all. It does not use localStorage, sessionStorage or any other storage on your device. That is why there is no cookie banner: under the ePrivacy rules a banner is required when a site stores or reads information on your equipment, and this one does neither.
This holds with analytics switched on, because Vercel Analytics is cookieless by design. It counts a visit without writing anything to your browser and without an identifier that follows you between sites.
Who else receives data
Your browser talks directly to these services, so they see your IP address. They are independent controllers of their own logs.
- OpenFreeMap serves the map tiles, so it can see which area you are looking at.
- Photon (Komoot) handles place search, so it sees what you type into the search box.
- Vercel hosts the page itself and provides the analytics described above.
- Hetzner hosts our route server in Germany.
All four are in the EU or EEA, so your data is not transferred outside it. Fonts are served from this site, not from a font CDN, so no third party sees you loading them.
Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability under Articles 15 to 22 GDPR. In practice there is almost nothing to exercise them against, because nothing is retained. Mail the address above and you will get a straight answer.
You can also complain to the Swedish authority, Integritetsskyddsmyndigheten (IMY).
Changes
If this changes, the date at the top changes with it. There is no mailing list to notify, because there is no mailing list.