Privacy Policy
This website is an independent, non-commercial project. It uses no cookies and does not track or profile individual visitors — there is no advertising, no Google Analytics, no cross-site tracking.
Controller
Stefan Eckner · [email protected] (address: see Imprint).
Privacy-friendly analytics (Umami)
To understand which pages are read — and nothing more — this site uses Umami, a privacy-focused analytics service (Umami Software, Inc.). Umami is cookieless, sets no identifiers on your device and does not create user profiles. It records only aggregate, anonymous information such as page URL, referrer, rough device type and country; it does not store your IP address and cannot track you across other websites. The legal basis is our legitimate interest in understanding, in aggregate, how the site is used (Art. 6 (1) (f) GDPR); because no personal profiles are created and no information is stored on your device, no consent banner is required.
You can exclude yourself entirely at any time: open 1001smartcities.org/optout and click the button — a small flag stored in your own browser then tells the analytics script to ignore you on that device.
Hosting and CDN (Cloudflare)
This website is provided via Cloudflare Pages. The provider is Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA. For technical reasons every request is routed through Cloudflare's infrastructure; access data (e.g. IP address) may be stored in log files. The legal basis is our legitimate interest in a secure and fast delivery of the site (Art. 6 (1) (f) GDPR).
Spam protection for contributions (Cloudflare Turnstile)
The contribution form uses Cloudflare Turnstile to distinguish legitimate submissions from automated abuse. When you open that form, your browser connects to challenges.cloudflare.com and Cloudflare processes technical connection and browser signals, including your IP address, to issue a short-lived, single-use verification token. Our server validates that token before accepting the form; neither the token nor the technical signals are stored with your contribution. Pre-clearance is disabled, so passing the check does not bypass other website security rules. The legal basis is our legitimate interest in protecting the public form and its infrastructure from spam and misuse (Art. 6 (1) (f) GDPR).
Fonts
Web fonts (Fredoka and Nunito, both open licensed) are used for a consistent appearance. They are self-hosted and delivered from this website's own domain — no request is made to Google or any other font provider, and your IP address is not transmitted to third parties for font delivery.
Maps and images
The mapping library (Leaflet) is likewise self-hosted and loads without any third-party request. Only when you open the interactive map or view project photos does this site load content from further providers; your IP address is then transmitted to the respective provider:
- OpenStreetMap (tile.openstreetmap.org) — world map tiles
- Wikimedia Commons (upload.wikimedia.org / commons.wikimedia.org) — freely licensed photos
The legal basis is our legitimate interest in a functional, appealing presentation (Art. 6 (1) (f) GDPR).
Location ("Near You")
The "Near You" feature asks for your location once via the browser to show projects nearby. The position is used solely locally in your browser — it is not stored and not transmitted. The request is only made after your explicit consent in the browser.
Your rights
You have the right to access, rectification, erasure, restriction of processing and objection. To exercise these rights, contact the address above. You also have the right to lodge a complaint with a data protection supervisory authority.