PRIVACY NOTICE
This notice explains what happens to the information you send through the map's feedback form and through the flight game's "did you enjoy it" box, and what the site's analytics count. It is written in plain language; if anything is unclear, write to me.
Who is responsible
The data controller is Bedirhan Yıldırım, who makes Isometric Warsaw as a personal project.
Contact for anything about your data: bedcodes@gmail.com
What is collected when you send feedback
Sending feedback is voluntary. When you send a note, the following is stored:
- What you write: the type of note (something wrong or missing, an idea, a bug, a hello, or a game rating), your message, and the thumbs up or down in the game's box.
- Your email address, only if you give one, so that I can reply. It is optional.
- Your choices: that you accepted this notice (and which version), and whether you ticked the separate box for news by email.
- The map view the note is about: the point on the map you pinned or the centre of your view (latitude and longitude), the neighbourhood name, the zoom level and the map's angle, the map's light, date and time settings, a season, weather or river level you picked, and whether the flight game was running (and, from the game's box, which mission and aircraft and how it ended). From this a link to the same map view is made, so I can see what you saw.
- A few technical details, so that a problem you report can be reproduced on the same kind of device: the size of the browser window, the version of the map, the browser's language setting, and the date and time the note was sent, and, as your browser reports them:
- whether the device is a desktop, phone or tablet, and its model name where the browser tells it (for example "Pixel 8" on Android; iPhones and iPads only say "iPhone" or "iPad");
- the operating system and its version (for example Android 15, iOS 18.2, Windows 11);
- the browser and its main version number (for example Chrome 141, Safari 18), and whether the map was opened inside another app's built-in browser (for example Instagram or Facebook);
- the type and rough speed of the network connection, where the browser gives them (for example "wifi" or "cellular", a speed class such as "4g", an estimate of the bandwidth and the round-trip time, and whether a data-saving mode is on). Safari and Firefox do not give these, so they are then recorded as unknown; no browser tells whether a mobile connection is 5G or LTE;
- the screen size and pixel density, whether the browser draws the map with WebGL 2, and the name of the graphics processor the browser reports (for example "Apple GPU" or "Adreno 740").
What is not collected
- Your IP address is not stored with your note or anywhere in the feedback database.
- To stop spam and abuse, a one-way hash of your IP address (made with a secret key that only the server knows, so it cannot simply be reversed) is kept with the time of sending, for at most 24 hours. It is used only to limit how many notes can be sent from one connection, and is then deleted automatically.
- No name, no account, no precise location from your device: the place in a note is the place on the map, not where you are.
- The form has a hidden field that only automated spam programs fill in; notes that fill it in, or that are sent within a few seconds, are thrown away unread.
Like every website, the web host's servers keep short technical access logs (which include IP addresses) to run and protect the service. I do not use them to identify visitors.
Why, and on what legal basis
- To read your feedback, answer it if you asked for a reply, and improve the map: your consent, given by ticking the box before sending (GDPR Art. 6(1)(a)).
- To prevent spam and abuse of the form (the short-lived IP hash and the sending limits): my legitimate interest in keeping the site and its host safe (GDPR Art. 6(1)(f)).
- To send occasional news about the project by email: only if you ticked the separate, optional box for it (GDPR Art. 6(1)(a)).
No decisions are made about you automatically, and your data is not sold or used for advertising.
News by email
News emails go only to people who gave an email address and ticked the separate box for news, which is never ticked in advance. Each email has an unsubscribe link, and you can also unsubscribe at any time by writing to the contact address. Withdrawing this consent changes nothing else: your feedback stays, and you can still get replies to it. If I start sending news, the service that sends them will be named in this notice before the first email.
Where it is stored and who can see it
- Notes are stored in a database on the site's web host, Hostinger, outside the public part of the website. Hostinger acts as a processor for me.
- Only I can read them. There is no web page where they can be viewed.
- If you give your email address and I reply, the conversation goes through my email provider (Google's Gmail).
How long it is kept
- Feedback: up to 24 months after it was sent, then deleted automatically. You can ask for it to be deleted earlier at any time.
- News list: until you unsubscribe.
- The IP hash for spam limits: at most 24 hours.
Your location on the map
The "Show my location" button asks your browser for your position, only when you press it and only with your permission. The position is used only inside your browser to move the map and draw the blue dot: it is never sent to this website's server, never stored, never put in the page address and never sent to analytics (analytics only learn that the button was used and whether a position was found). You can withdraw the permission at any time in your browser's site settings.
Counting who is on the map now
To show how many people are on the map at the moment, each open tab of the map sends the server a random id made for that tab about once a minute; it contains no personal data, is not stored in your browser (no cookie), is not linked to anything else and is deleted from the server a few minutes after the tab is closed or put in the background (only the highest count of each hour is kept).
Analytics on the map
The map (on bedirhanyildirim.com) uses Google Analytics (the Google tag, the same as on the rest of the website) to count page views and a few interactions, such as photos saved, info cards opened, use of the flight game and the feedback form being opened or sent. The text of your note and your email address are never sent to analytics. Google Analytics uses cookies and processes data such as your IP address on Google's side; Google acts as a processor and may process data outside the European Economic Area under the safeguards it describes. See Google's privacy policy and how Google uses information from sites that use its services. You can block analytics with your browser's settings or an extension, or with Google's opt-out add-on; the map works the same without it.
Your rights
Under the GDPR you have the right to:
- access the data about you and get a copy of it;
- have it corrected (rectification);
- have it deleted (erasure);
- restrict how it is used;
- object to its use based on legitimate interest;
- data portability: receive what you sent in a machine-readable form;
- withdraw your consent at any time, without affecting what was done before;
- complain to the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl).
To use any of these rights, write to bedcodes@gmail.com. As notes are not linked to an account, it helps to send the email address you used, or roughly when you sent the note and what it was about. I will answer within one month.
Children
The feedback form is not directed at children under 16. If you are under 16, please do not send personal information such as your email address.
Changes to this notice
The version and date at the top change whenever this notice changes. Each stored note records the version that was accepted when it was sent. If a change needs your consent again, I will ask for it; it is not assumed.