Privacy Policy
Last updated: 26 April 2025
Who we are
BANDOFINDER.EU is a community-built map of abandoned and industrial locations across Europe, aimed at FPV drone pilots and urban explorers. This privacy policy explains what data we collect, why we collect it, and how it is used.
For questions about this policy, contact us at contact@bandofinder.eu.
Data we collect
Account data — when you register, we store your name, email address, and a hashed password (or OAuth token if you sign in via Google/GitHub). Your email is never shared with third parties.
Submitted content — locations, photos, comments and votes you submit are stored in our database and may be visible to other users.
Visitor statistics — we log your IP address once per day to count unique visitors. IP addresses are not linked to accounts and are not shared.
Anonymous votes — if you vote without an account, your IP address is stored to prevent duplicate votes. It is not used for any other purpose.
Cookies
We use a single session cookie (next-auth.session-token) to keep you logged in. This cookie is strictly necessary and contains no personal information beyond a session identifier.
We use Google AdSense to display advertisements. Google may set its own cookies to personalise ads based on your browsing behaviour. You can opt out of personalised advertising via Google Ad Settings.
For more information on how Google uses data, see How Google uses information from sites that use our services.
Legal basis (GDPR)
We process your data on the following legal bases:
- Contract — to provide the service you signed up for (account, submissions, votes).
- Legitimate interest — anonymous visitor counts and duplicate-vote prevention.
- Consent — personalised advertising via Google AdSense (you may withdraw consent at any time via Google Ad Settings).
Data retention
Account data is kept for as long as your account exists. You can request deletion at any time by emailing contact@bandofinder.eu.
Visitor IP logs are stored for a rolling 90-day window and then deleted automatically.
Your rights
Under GDPR you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data ("right to be forgotten")
- Object to or restrict certain processing
- Data portability
To exercise any of these rights, email contact@bandofinder.eu. We will respond within 30 days.
Third-party services
We use the following third-party services:
- Google AdSense — advertising
- OpenStreetMap / Overpass API — map data and location import
- Nominatim — reverse geocoding
None of these services receive your account data. Map tile requests may include your IP address as part of normal HTTP traffic.
Changes to this policy
We may update this policy from time to time. The date at the top of this page reflects when it was last changed. Continued use of the site after changes constitutes acceptance of the updated policy.