Privacy policy

This page explains what personal data bareroutes.com processes when you visit it, and why. In short: no sign-up, no cookies, no advertising. We only collect anonymous, aggregated visit statistics.

What data we process

Browsing data. Like any website, when you open a page the server receives some technical information: IP address, date and time, requested page, browser type and referring page. We use it only to show you the site and to protect it from attacks and abusive automated access (bots). We do not use it to identify or profile you.

Email. If you write to us, we process your address and what you tell us only to reply, and keep the correspondence for as long as needed to handle your request.

We collect nothing else: the site has no sign-up, accounts or forms asking for personal data.

Cookies

The public site uses no cookies, neither our own nor third-party ones. There is no advertising and there are no social buttons. To count visits we use Vercel Web Analytics, which uses no cookies and stores nothing on your device (see below). Fonts are served from our own domain, with no calls to external services.

Only if our hosting's protection system asks you to pass an anti-bot check may your browser store a technical cookie remembering that you passed it. It is necessary for the site's security and therefore does not require consent.

Why we process it (legal basis)

Browsing data is processed on the basis of our legitimate interest in running the site and keeping it secure (Art. 6(1)(f) GDPR). Emails are processed to answer your request (Art. 6(1)(b) and 6(1)(f) GDPR). Anonymous visit statistics rely on our legitimate interest in understanding which pages are read (Art. 6(1)(f) GDPR).

Who receives the data

To run the site we rely on a few providers, who process data on our behalf or as independent controllers under their own policies:

• Vercel hosts the site and protects it from attacks: it receives the browsing data of every page. The logs we can access are kept for one hour. Vercel privacy policy
• Vercel Web Analytics counts the pages visited, the referrer, the country, the device type and the browser. It uses no cookies: to tell visits apart it derives a code from the request, which is deleted after 24 hours. We only see aggregated numbers, never the individual visitor, and can view them for 30 days. Vercel Web Analytics and privacy
• Supabase stores the images of the places on servers in the European Union (Stockholm): your browser downloads them directly from there, so Supabase receives your IP address. Supabase privacy policy
• OpenFreeMap provides the maps on the Map page and on the pages of each place: your browser downloads them directly from them. According to their policy, their logs contain no IP addresses, except in case of abuse and for at most 30 days. OpenFreeMap privacy policy
• Cloudflare and Google receive and deliver emails sent to info@bareroutes.com. Cloudflare privacy policy · Google privacy policy

We do not sell or pass the data on to anyone else.

Transfers outside the European Union

Some of these providers are based in the United States. In those cases the transfer relies on the safeguards required by the GDPR, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

Your rights

You can ask us at any time to access, correct or erase your data, to restrict its processing or to object to it (Arts. 15-21 GDPR), by writing to info@bareroutes.com.

You also have the right to lodge a complaint with the supervisory authority of your country; in Italy it is the Garante per la protezione dei dati personali.

Changes

If the way the site processes data changes, we will update this page and the date below.

Data controller

The controller is Roberto Sivori, who runs bareroutes.com. For any privacy request, write to info@bareroutes.com.