Privacy Policy

Controller

Ignacio Rodríguez Paradela (MyTerrain), sole proprietorship

Neckarpromenade 32, 68167 Mannheim, Germany

Email: hello@myterrain.art

What data we process

When visiting the website and configurator: technical access data (e.g. IP address, browser type, time of access, referrer), insofar as our hosting or integrated services collect this.

In the configurator: GPX files uploaded by you, selected map areas, design parameters (text, colours, frame), and — when using place search or the place name feature — coordinates transmitted to determine a place name.

When placing an order: contact and delivery details, order details, GPX files and design parameters for the respective order.

For gift purchases: the buyer's email address; the recipient provides their own delivery details when redeeming.

Payment processing is handled via Stripe; we do not receive full card details.

Purposes and legal bases

Performance of contract and pre-contractual measures (Art. 6(1)(b) GDPR): processing orders, producing individual relief maps, shipping and customer service.

Legitimate interest (Art. 6(1)(f) GDPR): operation, security and technical stability of the website and configurator, abuse prevention, and provision of the map and relief preview.

Consent (Art. 6(1)(a) GDPR): Google Analytics 4 and the Meta Pixel, if you agree in the cookie banner (see below).

External services in the map configurator

The configurator loads map tiles and terrain elevation data via the user's browser from external servers. The user's IP address is transmitted to those servers. OpenStreetMap feature queries (Overpass) and place names go through our API (see below). We do not use Mapbox, MapTiler or Stadia maps for this.

OpenStreetMap map tiles (OpenStreetMap Foundation, tile.openstreetmap.org) — display of the background map.

OpenStreetMap features (roads, water, forests, coastlines) via Overpass: the browser sends the query to our API (Supabase Edge Functions, EU). Our server forwards it to Tracestrack B.V. (Eindhoven, Netherlands). Tracestrack sees our server's IP address, not the user's directly. The geodata remain OpenStreetMap data (© OpenStreetMap contributors, ODbL).

Mapzen Terrarium elevation data (Amazon Web Services, s3.amazonaws.com/elevation-tiles-prod) — terrain elevations for the 3D preview.

Place names via reverse geocoding: the browser sends coordinates to our API (Supabase Edge Functions, EU). Our server forwards the request in compliance with Nominatim terms of use (max. 1 request/second, identifiable user agent) to nominatim.openstreetmap.org (OpenStreetMap Foundation). Nominatim sees our server's IP address, not the user's directly.

JavaScript libraries (Leaflet, Three.js) are currently loaded from public CDNs (unpkg.com, cdn.jsdelivr.net). The user's IP address may be transmitted to these CDN operators.

Services for website operation and orders

For orders, backend and storage we use Supabase (database, file storage, Edge Functions). Order and design data are processed and stored in the EU (Ireland), unless stated otherwise.

Stripe Payments Europe, Ltd. — payment processing; processing in accordance with Stripe and to the extent required for payment.

Resend, Inc. — sending transactional emails (order confirmations, gift codes).

Fonts (Inter, Cal Sans) are loaded from our own hosting; no connection to Google Fonts is made.

Retention period

We retain order and invoice data in accordance with commercial and tax law requirements.

Server log data is kept only as long as necessary for operation and security.

The configurator stores Overpass tiles locally in the browser (IndexedDB) for up to 7 days to reduce repeat requests.

GPX and design data

GPX files uploaded to produce an individually configured 3D relief map and the associated design data are stored only as long as necessary for production and fulfilment of the order.

After completion of the order, this data is deleted as soon as it is no longer required for the stated purposes, unless longer retention is required by law or for asserting, exercising or defending legal claims.

Google Analytics

We use Google Analytics 4 (Google Ireland Limited) to understand website usage in aggregated form (e.g. page views, origin, device type).

The Analytics script (googletagmanager.com) is loaded only after you explicitly consent in the cookie banner. Before that, no Google Analytics tracking is performed; Consent Mode is set to "denied" by default.

You can revoke your consent at any time by deleting the consent entry in your browser storage (localStorage entry myterrain.cookieConsent.v2) and reloading the page — the cookie banner will appear again.

Meta Pixel

With your consent we use the Meta Pixel (Meta Platforms Ireland Limited) to measure the performance of our Meta ads (for example Facebook and Instagram), understand which ads led to a visit or purchase, and improve those campaigns.

The Pixel script (connect.facebook.net) is loaded only after you explicitly consent in the cookie banner. Before that, no Meta advertising cookies are set and no ads events are sent.

Data such as page views, device/browser information, truncated IP address and — after a completed purchase — a conversion event with order value may be transmitted to Meta. Meta may also process data in the United States; Meta uses standard contractual clauses and additional safeguards for that transfer.

You can revoke your consent at any time by deleting the consent entry in your browser storage (localStorage entry myterrain.cookieConsent.v2) and reloading the page — the cookie banner will appear again.

Newsletter

We currently do not send a newsletter and do not collect sign-ups for one.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests.

You may revoke consent given at any time.

You have the right to lodge a complaint with a data protection supervisory authority.

Please direct enquiries to: hello@myterrain.art.