peilamsterdam.nl / en / privacy

Privacy at PEIL Amsterdam

iBridge, trading as PEIL, is the controller. This is the app-specific supplement to PEIL's base privacy statement; that page also explains contact, your rights and the route to the Dutch Data Protection Authority. Your location stays on your device for the map. No account required, no ads and no third-party trackers. For the closed beta and Friends, the app uses the strictly necessary peil_beta access cookie for up to 90 days; Friends keeps the same invitation as a recovery copy in local browser storage (localStorage) until you overwrite it or erase browser data. This access token contains no location; a shared position expires after 15 minutes.

On your device

Location and your own data

GPS location

Your GPS location stays on your device and does not go to the server while boating. If you choose Friends on the map yourself, you consent to temporarily sharing your name and latest position with people holding the same invitation; never a trail. The position expires after 15 minutes.

trips and marks

Recorded trips, marks and attached photos are stored locally on this device, not in an account. That content leaves your device only when you choose to share it.

Ask about this point

Only after you tap send, your question, at most five earlier conversation turns and the source pack for the selected place travel through PEIL to Anthropic to produce an answer. Your location and boating history are not included. PEIL does not retain the conversation; Anthropic retains API inputs and outputs for up to 30 days by default, except where abuse investigations or law require longer. Storage is in the United States and processing may also occur elsewhere; the DPA with EU standard contractual clauses applies. Anthropic does not use this commercial API input for model training.

external services

OpenFreeMap/OpenMapTiles supplies map tiles and the weather source supplies the selected forecast. On a place card PEIL asks Google for a rating and place id; Google sees your IP address and PEIL keeps the response in working memory for at most 30 minutes. For walking and cycling the PEIL server sends route coordinates without your IP address to openrouteservice; PEIL caches such a route for at most one day. A direct drive-time request or route using your own key goes to openrouteservice or OSRM, which then sees your IP address. Your current position is sent only when recalculating. The app privacy panel also carries the full list for each path.

Anonymous signals

What the app counts

On the basis of the legitimate interest in improving the beta, the app sends only pre-approved event names. No user ID, device ID or GPS location is attached. App version, edition, language, platform, active feature and the server date accompany each report. The daily totals and scrubbed error messages currently have no automatic expiry; they cannot be linked to a visitor, and you can switch statistics off in the app.

  • Opening and installing the app; starting a route; opening a rule or place card.
  • Using the map menu, filters, feature and transport choices; only the permitted category or control, never your resulting set of map layers.
  • Using invitations, feedback and nightlife components; never which person, place, artist or night you chose.
  • Technical errors as scrubbed error text without web addresses; IP addresses are not stored in the counter database.

the complete event list is also in the app under Privacy · statistics can be switched off in the app

Closed beta

Access and hosting

Basic Auth

The beta is protected with a shared user name and password through Basic Auth. That grants access to the beta; it is not a PEIL account and creates no user profile.

technical logs

For security and abuse prevention, the web host and intermediary edge services may process technical access logs, such as IP address, time and requested URL. They retain those according to their current security and legal periods; PEIL does not use them to build a personal profile or boating history.

contact

Send privacy questions or a request to inspect or erase data you deliberately shared with PEIL to info@peil.nu.

Limits

What PEIL never measures

No GPS location, route or boating behaviour in the anonymous counters; no user or device ID; no advertising or tracking cookies, fingerprinting, ads or third-party trackers. The necessary peil_beta cookie only manages access and invitations and is not a measurement.

When you share something yourself

Feedback text and an optional e-mail address are used at your request to reply and remain in PEIL's database until manually removed; there is currently no automatic expiry. You can ask for immediate removal at info@peil.nu. A shared photo or location leaves your device only after your own action; the app explains that choice at the time.