Privacy policy

This page explains what data Wouf.lu processes, why, and how to exercise your rights.

Data controller

Information to be completed (identity and contact details, see the legal notice).

Contact for any question about your data: Information to be completed

You can browse the map, places, guide and commune pages without creating an account.

No audience measurement or advertising trackers are used.
"Near me": your position is computed by your browser and is never sent to the website. The website only receives an area rounded to about 2 km, and nothing is stored.
IP address: it is used to limit the number of requests, to protect the website against abuse. These counters are temporary (one hour at most) and are not linked to any account. The server's technical logs may also contain your IP address; retention period: Information to be completed.
Base map and libraries: they are served by Wouf.lu itself. Viewing the map therefore sends nothing to a third-party service.
External links: the "Directions" buttons open Google Maps or OpenStreetMap. These services are only contacted if you click, and their own rules then apply.

You sign in without a password, with a code sent to your email address.

Email address: signing you in (login codes) and identifying you.
Display name (optional): shown next to your published contributions, only if you entered one.
Preferred language: showing the website in your language.
Your contributions (suggested places, suggested changes, photos, reports): publishing them after a moderator has checked them.
Moderation decisions: keeping track of who approved or rejected what (moderation log).

Legal basis of each processing: Information to be completed

Photos: all metadata is removed on upload, including the GPS position that phone photos often contain. Photos are only visible once a moderator has approved them.
Team accounts (moderators, administrators): if they enable two-factor authentication, the website stores the secret of their authenticator app and their recovery codes. The map widget of the administration shows OpenStreetMap tiles, loaded from the OpenStreetMap Foundation's servers.

The website only uses cookies that are strictly necessary for it to work, with no advertising trackers or audience measurement:

a session cookie, to stay signed in;
a security cookie (CSRF), which protects forms against fraudulent submissions.

No consent banner is therefore needed.

Hosting of the website and photos: OVH (Information to be completed: hosting country).
Sending emails (login codes): Information to be completed
Wouf.lu's moderators and administrators, to check contributions.

Your data is neither sold nor transferred.

Account and related data: until the account is deleted. Period in case of prolonged inactivity: Information to be completed
Login codes: valid for 15 minutes.
Server technical logs: Information to be completed

At any time, you can:

download your data: My account → Export my data (JSON file);
correct your display name and language (My account → Profile) or your email address (My account → Email address);
delete your account: My account → Delete my account. Your personal data is erased. Contributions that are already published remain visible but anonymised: they are no longer linked to you. Contributions still pending are deleted.

For any other right (objection, restriction…) or question: Information to be completed

You can also lodge a complaint with the National Commission for Data Protection (CNPD), the supervisory authority in Luxembourg.