Privacy Terms
Last updated: 04.11.2026
Who is responsible
Responsible for processing your data is the provider named in the legal notice. For anything about your data, write to info@o-map.ch.
Data we store
- Account: name, e-mail address, public username, password (stored only as a secure hash), language and settings.
- O-Editor: objects you draw, with time of entry, symbol, coordinates and your username (see the conditions). They also appear on the public edits heatmap (only as a position, without your name); this can't be turned off.
- O-Analyser: the track from your GPX, FIT or TCX file (positions, elevation and times; the file itself is not kept), map images, title and comment. New activities and your activity list are public unless you make them private; private activities are only visible to you. If you share an activity by e-mail, we store the recipient's address. The worldwide activity heatmap is opt-in: only if you turn it on in the settings are your public activities included, without your name. Start and finish (the first and last 200 m of every track) are left out, a spot only shows once at least three people have been there, and the map stops at a coarse zoom level. Private activities are never included.
- O-Manager: your events with their courses, controls, classes, map settings and uploaded background maps, the team members and invitations (e-mail address of the invited person), and team comments with the members you mention in them (they get an e-mail unless they switched it off). If the team adds a background map to the public O-Map, its objects become part of the map like O-Editor drawings. Where other members' mouse pointers are is only passed on live and not stored. Your GPS position (on the event map, after you allow it in the browser) stays in your browser; it is only stored when you post a comment "at my position", and then only that one position, visible to the team. Photos you attach to a comment are scaled down in your browser (which also removes their EXIF data, such as the camera location), stored with the comment, shown only to the team and deleted with the comment or the event.
- Contact form: your name, e-mail address and message, and your account if you are logged in. The feedback survey runs on Google Forms; we don't store its answers on our server.
- Security: to stop password guessing and abuse, the server briefly keeps your IP address in memory (login attempts, requests for new map areas). It is not written to the database.
- Map use: so that popular areas are loaded and up to date before you get there, we count how often each map area (about 3 × 3 km) was looked at per day and take into account in which areas O-Analyser tracks lie. Only these counts per area are stored, without IP address, account or cookie. So that you count once a day, the server keeps a hash of your IP address with a random value that changes daily in memory until the end of the day, which can't be traced back to you; the daily counts are deleted after 400 days.
We use the data only to run the O-Map and its functions, to answer you and to keep the service secure.
How long we keep it
Your data stays as long as you have an account. Login sessions end after 30 days without a visit, links for confirming or resetting expire after a short time. Accounts whose e-mail address is not confirmed within 7 days of registering are deleted automatically. Objects drawn in the O-Editor stay on the map, with earlier versions in the edit history (see the conditions). Daily backups are kept for up to six months, so deleted data only disappears from them after that.
Where it is stored
We will not pass on your data to third parties without your express consent. The data is stored on our own server in Europe. E-mails from the O-Map (confirmation, password reset, invitations, mentions) are sent through our mail provider.
Cookies
We use the following cookies. Necessary cookies need no consent; everything else is only set after you agree in the cookie banner.
| Cookie | Purpose | Duration | Category |
|---|---|---|---|
omap_session |
Keeps you logged in | 30 days | necessary |
omap_lang |
Remembers the language you chose (only set when you choose one) | 1 year | necessary |
omap_consent |
Stores your cookie choice | 6 months | necessary |
_ga, _ga_… |
Google Analytics: counts visits and page views | up to 2 years | statistics, only with your consent |
Google Analytics (Google Ireland Ltd.) is only loaded if you allow statistics cookies; before that your browser makes no request to Google. It tells us how many people visit which pages, so we can improve the O-Map. Google receives your IP address and information about your browser; data may be processed in the USA. Account, dashboard, O-Manager and admin pages are not measured, and we never send parameters from links (such as tokens). If your browser sends Do Not Track or Global Privacy Control, Google Analytics stays off.
You can change or withdraw your choice at any time: Cookie settings.
External services
To display the map, your browser loads data directly from these services, which therefore see your IP address:
- Base map tiles: OpenFreeMap
- Terrain data for contours and hillshading: Mapterhorn (served via Cloudflare; keeps request logs with IP address for up to 30 days, privacy policy)
- Place search: Photon by komoot
- O-Editor and O-Analyser backgrounds: Esri World Imagery (USA), OpenStreetMap tiles and MapAnt.fi
- Newsletter: Mailchimp (USA, only if you subscribe); feedback survey: Google Forms (USA, only if you open it)
- Donations: PayPal (only if you donate)
- Visitor statistics: Google Analytics (only with your consent, see Cookies)
Some of these services may process data outside Switzerland, in particular in the USA.
Your rights
You can view and change your data in the settings at any time. You have the right to information about your data, to have it corrected or deleted and to receive it in a common format. To delete your account or for any other request, contact us at info@o-map.ch. If you think we process your data unlawfully, you can complain to the Federal Data Protection and Information Commissioner (FDPIC).
We may adapt this privacy policy; the current version is always on this page.