Privacy policy

The controller of the data related to the operation of the website koronagorpolski.com.pl is TAKZEN DEV, based in Kościan, Poland. Contact: the form at takzendev.pl/contact.

The website stores no cookies and no data in local storage (localStorage, sessionStorage) in your browser. Settings such as the season, the time of day or the sound last only until the page is reloaded or closed. That is why there is no cookie consent banner here.

The exception: when you sign in to the journal, the browser keeps a session key in local storage, so you do not have to sign in on every visit. It is necessary for signing in to work, is not used for tracking and disappears when you sign out.

The website runs on the infrastructure of Vercel Inc. On every visit, Vercel’s servers automatically record technical data: the IP address, the date and time, the address of the page opened and information about the browser. From the IP address Vercel also determines the city and country. The data are used to deliver the website, secure it and detect errors.

The legal basis is the controller’s legitimate interest – the operation and security of the website (Article 6(1)(f) GDPR). Vercel processes these data as a processor on behalf of the controller. The data may be transferred to the United States – Vercel takes part in the EU-U.S. Data Privacy Framework (Vercel’s privacy policy). The controller does not combine the logs with other data and does not use them for profiling.

Visit statistics: the website uses Vercel Web Analytics to know how many people visit each page. The script stores nothing in the browser (it uses no cookies) and, on every page view, sends Vercel: the page address (without parameters), the address of the referring page, the approximate location (country, region, city), the operating system, the browser and the device type. Vercel links page views of the same person with a hash created from the request data, which it deletes after 24 hours. The controller only sees aggregate numbers that do not allow anyone to be identified. The legal basis is the controller’s legitimate interest – knowing which parts of the website are used (Article 6(1)(f) GDPR); Vercel processes these data as a processor, on the terms described above.

On the Map page your browser downloads map tiles directly from the OpenFreeMap servers (tiles.openfreemap.org) and relief data (Terrain Tiles) from Amazon Web Services servers. As with any connection, these servers receive your IP address and information about your browser. OpenFreeMap states that it uses no cookies or registration (openfreemap.org).

The home page and the peak pages use only files from the website’s own server – the fonts are served from here too, without connecting to Google.

The website contains links to other sites: Wikipedia, OpenStreetMap, GUGiK, partners and TAKZEN DEV. Nothing is passed to them until you click a link. After you follow it, the privacy policies of those sites apply. Partner cards are plain links – without tracking pixels or advertising scripts.

We count clicks on partner cards, on the TAKZEN DEV card and on the “buy me a coffee” link: a click adds one to the daily total for that card in the Supabase database. We store only the card name, the page language, the day and the number of clicks – nothing about you. As with every request, Supabase’s servers see the IP address in their technical logs (a processor, on the terms described in the journal section). The legal basis is the controller’s legitimate interest – settling accounts with partners (Article 6(1)(f) GDPR).

If you write to us through the form at takzendev.pl, your data are processed according to that site’s privacy policy.

The journal is optional. When you set it up, we process: your e-mail address, and when you sign in with Google also your name and the address of your profile photo, which Google passes to us (we do not display or use them), entries about climbed peaks (the peak, the date of the climb, a note), the photos you add, and the dates when entries were created and changed. Photos are scaled down in your browser, and the location and camera data stored in them (EXIF) are removed before the file is sent.

The legal basis is the performance of the agreement for keeping the journal, which you conclude by signing in (Article 6(1)(b) GDPR). Only you can see the entries and photos in your journal – they are not published or shared with other users, and we do not use your e-mail address to send any messages.

Signing in with Google: the “Sign in with Google” button takes you to Google’s page, which confirms your identity and passes us the data listed above. Google processes the sign-in data as a separate controller, under its own privacy policy – in doing so it learns, among other things, that you sign in to this website. You can remove the website’s access to your Google account at any time in your Google account settings.

Climbers’ gallery: if you add a photo to a peak’s gallery, we process the photo itself (scaled down and without EXIF), the author credit and caption you enter, and the time you made the declarations. Before approval the photo is not shown anywhere – only you and the administrator know its address. Once approved, every visitor sees the photo with the credit and caption on the peak’s page, but not your e-mail or Google account data. The files are kept in public Supabase storage, and their address contains a random account identifier that does not reveal who you are. The legal basis is the performance of the agreement – publishing the photo at your request (Article 6(1)(b) GDPR). We keep the photo until you delete it (on the peak’s page), delete the peak’s journal entry or the account, or the administrator rejects it.

Accounts and journal data are stored for us by Supabase (a processor). The data may be transferred outside the European Economic Area, including to the United States and Singapore, on the basis of standard contractual clauses approved by the European Commission (Supabase privacy notice).

We keep the data as long as you have an account. You can delete each entry and photo separately, and the “Delete account and data” button in the journal immediately deletes the account with all entries and photos, including those in the gallery.

You have the right to access your data, to have them rectified, erased and their processing restricted, and the right to object to processing based on legitimate interest (Articles 15–18 and 21 GDPR). Without additional information from you, the controller is unable to link entries in the server logs to a specific person (Article 11 GDPR).

You can view, correct and delete your journal data yourself after signing in. You also have the right to receive a copy of them in a portable format (Article 20 GDPR) – write to the controller.

You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (uodo.gov.pl).

The policy is updated before features that process data are introduced. The date of the last change is at the top of the page. See also the terms of use.