Dit document is beschikbaar in het Engels en het Pools. Polski

Privacy policy

Ominuvo only collects the data it needs to run. We show no ads, sell no data and use no tracking cookies.

Effective from 1 November 2026.

Data controller

The controller of personal data on Ominuvo (ominuvo.com) is Komba Maciej Włodarczak, Bławatkowa 11, 62-080 Tarnowo Podgórne, Polen, VAT ID PL7772882191, REGON 300831750. For anything related to your personal data, write to contact@ominuvo.com or use the contact form.

What data we process and why

Browsing the site

• Viewing the catalogue and maps needs no account and stores nothing in your browser.
• The server keeps standard logs (IP address, time, page address, browser information). They are used for security and troubleshooting – our legitimate interest (Art. 6(1)(f) GDPR). Logs are kept briefly, only as long as needed for these purposes.
• Map pages count views – just a counter, with no data about the visitor.

Statistics

We count visits with Matomo on our own statistics server, without cookies and with a shortened IP address, so no individual can be identified. The data is only used to see which pages are read (Art. 6(1)(f) GDPR) and is never passed to advertising networks.

Account

• Data: email address, the name shown on your maps, your password as a hash (bcrypt – nobody knows the password itself), plan, language, the dates of registration, email confirmation and last login, and your maps and iceberg charts.
• Purpose and legal basis: running your account and providing the services described in the terms of service (Art. 6(1)(b) GDPR). Providing the data is voluntary, but an account cannot be created without it.
• What is public: your display name and the maps you publish. Your email address is never shown to others.
• How long: until you delete your account. You can delete your account and all your maps yourself in your account panel – immediately and permanently; the data may remain in backups until they are overwritten.
• Emails: we send a link to confirm your address after registration, and a link to set a new password when you request one (valid for an hour; we store only its hash). We may also email you about the service (e.g. changes to the terms, your subscription, a report concerning your map). We do not send advertising.

Login and security

• Session cookie (ominuvo_session) – set only once you open the login or registration form or log in. It keeps you logged in (for up to 30 days) and protects forms against abuse. It is strictly necessary for your account, so it does not require consent. We use no other cookies.
• Failed logins and new accounts – we keep the IP address and the email entered for one day to block password guessing and mass account creation (Art. 6(1)(f) GDPR).
• Site theme – when you choose the light or dark theme with the switch in the header, your browser remembers the choice on your device (localStorage, key theme). It is never sent to us; the “automatic” mode stores nothing.
• Map draft without an account – you can start a map without signing in. Its content (title, description, data, settings) is then stored only by your browser on this device (localStorage, keys ominuvo.draft.<type> and ominuvo.claim) – it is not sent to us and no cookie is set. It reaches our server only when you sign in or sign up and save the draft to your account; it is then removed from the browser. You can delete the draft with the “Delete draft from browser” button or by clearing the site data in your browser.
• Daily challenge – the results of the daily quiz and your day streak stay only in your browser (localStorage, key ominuvo-quiz-daily: day, score and per-question marks). They are not sent to us and no cookie is set; the shareable result address contains only the day and the score. You can delete them by clearing the site data in your browser.

Contact form

• Data: your name or nickname, email address and message, plus the language version and the page it was sent from. The message is delivered by email to contact@ominuvo.com.
• Purpose and legal basis: replying to your message – based on the consent you give in the form (Art. 6(1)(a) GDPR); protecting the form against spam – our legitimate interest (Art. 6(1)(f) GDPR). Providing the data is voluntary, but without it we cannot reply.
• Spam protection: we store the sender’s IP address only as a hash (the address cannot be recovered from it) for the message limit, and delete it after an hour. The form uses no cookies.
• How long: as long as needed to reply, and then for no longer than 12 months, unless longer retention is required by law or for the defence of legal claims.
• Withdrawing consent: at any time, by writing to contact@ominuvo.com. This does not affect the lawfulness of processing before the withdrawal.

Payments

• Reseller: the Pro plan is sold by Paddle.com Market Limited (United Kingdom), the Merchant of Record for our orders. The data you enter at checkout (name, email, country, postcode, card or other payment details, invoice details) is collected and processed by Paddle as an independent controller under its privacy policy. We never see or store your card details.
• What we receive from Paddle: customer and subscription IDs, the plan and billing period, the subscription status (active, cancelled, payment overdue), period and renewal dates, and links for managing the subscription. At checkout we pass your account email and account number to Paddle so the payment can be matched to your account.
• Purpose and legal basis: activating and maintaining the Pro plan (Art. 6(1)(b) GDPR) and accounting obligations (Art. 6(1)(c) GDPR).
• How long: subscription data until you delete your account; records needed for accounting and the defence of legal claims for the limitation period (usually up to 5 years). Receipts and invoices are kept by Paddle.

Who receives the data

The data is stored by our hosting and email provider, and statistics by the Matomo statistics server. They process it solely on our behalf, under data processing agreements. We may also disclose data to public authorities where the law requires it. We do not sell data. Data leaves the European Economic Area only to Paddle for payments (United Kingdom – a country for which the European Commission has found an adequate level of data protection).

Maps embedded on other sites, and links

A map embedded on another website (in an <iframe>) sets no cookies; the website that embeds it is covered by its owner’s policy. The Ominuvo series maps (such as volcanomap.ominuvo.com) describe their data processing on their own “About” pages. We are not responsible for external websites we link to.

Your rights

You have the right to access, rectify, erase, restrict and port your data (you can also download map data as CSV), to object to processing based on legitimate interest, and to withdraw consent. Write to contact@ominuvo.com. You can also lodge a complaint with a data protection supervisory authority – in Poland, the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warszawa), or the authority in your country of residence.

We do not make automated decisions and do not profile users.

Changes to this policy

The current version is always on this page, with the date it takes effect. We will notify account holders of significant changes by email.