EN
Log in Sign up
Privacy policy

Protection of your personal data

Last updated: November 4, 2026. English translation for information only; the Spanish version prevails.

Data controller

Owner
Ignacio Calvo Mateos (Adventure Maps)
Tax ID
46063204T
Address
Pujades, 08019 Barcelona
Email
hi@advmaps.com

What data we process

  • Your account: name, email, password (stored hashed, never in plain text), language and the date you accepted these terms.
  • What you create: the GPX files you upload, the routes you draw, your maps with their stops and texts, and the images you add to your library. A GPX may contain the places and dates of your trips: we only use it to make your map.
  • Place searches: the text you search for on the map, which we look up on your behalf without sending your personal data.
  • Purchases and credits: the credits you buy and use, with their date and the Stripe purchase identifier. Your card details are handled directly by Stripe; we never see or store them.
  • Technical data: IP address and server logs, needed for the service to work and for its security.
  • Visit statistics: on the public pages we count which page is viewed, the language, the type of device and which website or campaign you come from. No cookies and without storing your IP: from the IP and the browser we compute a code that changes every day and cannot tell who you are. If your browser asks not to be tracked (Do Not Track or Global Privacy Control), the visit is not counted.

Why we use it and on what legal basis

  • To provide the service (your account; creating, saving and downloading your maps; verification and password emails): necessary to perform the contract you accept when you sign up.
  • To charge and invoice the maps you buy: performance of the contract and our tax obligations.
  • Security and abuse prevention (rate limits, logs): our legitimate interest in keeping the service safe.
  • Marketing: only with your express consent, which you can withdraw at any time.
  • Visit statistics, aggregated and anonymous, to learn how the website is used and improve it: our legitimate interest.

We do not build profiles or take automated decisions that affect you.

How long we keep it

For as long as you have an account. If you delete it or ask us to, we delete your data, maps and images, except purchase records, which we keep for the periods required by law (generally six years for accounting and tax records). Visit statistics are deleted after 13 months.

Who we share it with

We do not sell or hand over your data. To provide the service we use providers that process it on our behalf and only for that purpose:

  • Hosting of the service and your files: Hetzner Online GmbH (Germany), on servers located in the European Union. The server is managed with Laravel Forge (Laravel Holdings Inc.), which only accesses it to set it up, update it and deploy the service.
  • Email delivery (account verification and password reset).
  • Map servers (OpenFreeMap for the cartography and Amazon Web Services for the relief), from which your browser loads map tiles while you edit.
  • Place search (Nominatim, by OpenStreetMap), to which our server sends only the text searched.
  • Stripe, which handles payments and acts as the seller of the credits: when you buy, Stripe receives your email, country and payment details, and processes them as a controller to charge, invoice, prevent fraud and meet its tax obligations (see Stripe's privacy policy). It only tells us that the purchase was completed.

Some of these providers may process data outside the European Economic Area (for example Laravel or Amazon in the United States). They do so with the safeguards the GDPR requires, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

Cookies

We only use technical cookies the service needs: the session cookie (to keep you signed in), the form security cookie and the language you chose. We use no analytics or advertising cookies, so we do not ask for consent to them. Each cookie is listed in the cookie policy.

Your rights

You can ask us at any time to access, correct or delete your data, to restrict or object to its processing, and to receive it in a portable format, by writing to hi@advmaps.com. If you gave your consent to something, you can withdraw it whenever you want, without affecting earlier processing.

If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).

Security

Passwords are stored hashed, the connection is always encrypted (HTTPS) and your files and images are only reachable from your account.

Changes

If we change this policy significantly, we will tell you by email or in the service.

In accordance with the GDPR (Regulation (EU) 2016/679) and Spanish Organic Law 3/2018, this information constitutes the required Detailed Data Protection Information.