Privacy Policy

Last updated: May 2026

What We Collect

Strado uses cookie-free analytics. Every page view and a small set of interaction events (chip clicks, favorite saves, language switches, etc.) are sent to Cloudflare's Analytics Engine. We collect:

• Page views (which pages you visit) and referrer (how you found us)
• Country and Cloudflare data-center code (IP-derived, not the IP itself)
• Truncated IP (/24 for IPv4, /48 for IPv6) -- never the full IP
• Browser language and user agent (truncated to 200 characters)
• A per-tab session ID stored in sessionStorage; expires when you close the tab. Not a persistent device or user identifier.

No cookies are set. No persistent device-level identifier is stored. Data is processed under the GDPR legitimate-interest basis (Recital 49) for security and aggregate analytics. During a transition period (May-June 2026) the same events are also sent to a self-hosted Umami instance for migration validation; that path will retire after dual-track verification.

Server Logs & Share-Card Attribution

When you click a Strado share card on social media, the request passes through our share-card service at og.strado.info. We log standard server-side request data to understand which platforms are sending us traffic and to detect abuse:

• HTTP user agent and referrer (without query strings)
• IP address truncated to a network range (/24 for IPv4, /48 for IPv6) -- never the full IP
• Country and Cloudflare data-center code
• A short per-request token (srcid) embedded in the redirect URL so we can join the click to the page view that follows. The token lives for one request and is not stored on your device.

No persistent identifier ties a request to a specific person. Logs are processed under the GDPR legitimate-interest basis (Recital 49) for security and aggregate analytics. Retention: 30 days.

Map Starting Position & Locate Button

When you open the map, Cloudflare's edge gives us your approximate country and city based on your IP address (the same data anyone with a website can see). We use it to pick a starting view -- usually a covered city near you -- so the map opens somewhere relevant. This data is not stored or logged on our servers; it is consumed once per page load and discarded.

If you click the locate button on the map, your browser will ask whether to share your GPS location. If you allow it:

• Coordinates stay in your browser. We do not store or log them.
• They are used to fly the map to your spot and look up the underlying hex.
• The reverse-geocode call (street name) is sent to OpenStreetMap's Nominatim service. See their privacy policy.
• You can deny or revoke the permission at any time in your browser settings.

Browser Storage (no cookies)

Strado uses your browser's localStorage for features you explicitly use. Nothing here is sent to our servers; it lives only on your device:

• Favorites -- locations you've starred, including coordinates and any note you added
• Recent searches -- the last 8 places you searched or clicked, so the dropdown can suggest them
• Map preferences -- your last-selected category and basemap, so the map opens the way you left it
• Language -- your selected interface language for the map, so it opens in the same language next time

sessionStorage holds a short attribution token plus the cached geo-default lookup within a single browsing session. It is cleared when you close the tab.

You can clear all of this at any time using your browser's site-data tools, or via the "Clear all" button in the favorites drawer.

Affiliate Links and Third-Party Cookies

Our city pages contain affiliate links to services we recommend for people relocating to a new city. These partners may set cookies on your device to track referrals:

• Booking.com (via CJ Affiliate) -- accommodation bookings
• Revolut -- fee-free international payments
• SafetyWing -- expat health insurance

These links are clearly labelled on our pages. We earn a commission when you make a purchase through them, at no extra cost to you. The third-party cookies set by these services are governed by their own privacy policies. You can manage cookies through your browser settings.

No User Accounts

Strado does not currently require user accounts. No personal data is collected, stored, or processed beyond what is described above.

Data Sources

All neighborhood data comes from OpenStreetMap, used under the Open Data Commons Open Database License (ODbL). Map tiles by CARTO.

Your Rights

Since we don't collect personal data, there is nothing to request, modify, or delete. If this changes in the future, we will update this policy and provide appropriate controls.

Contact

Questions about this policy? Reach us at [email protected].