1. Overview

This privacy policy explains how ThingsToDoMap ("we", "us", or "our") collects, uses, and protects your personal data when you visit our website. We are committed to protecting your privacy and ensuring transparency about how we handle your information.

This website does not require user registration or accounts. You can browse our content freely without providing personal information, except where explicitly stated (e.g., newsletter subscription).

2. Data Controller

The data controller responsible for this website is:

Daniel Busch
Käsenbachstraße 20
72076 Tübingen
Germany

Email: [email protected]

3. Data We Collect

We collect the following types of data:

3.1 Automatically Collected Data

When you visit our website, certain information is automatically collected by our hosting and infrastructure providers:

• IP address (anonymized where possible)
• Browser type and version
• Operating system
• Date and time of access
• Pages visited and referrer URL
• Device information

This data is collected for security purposes, to ensure the proper functioning of our website, and to analyze usage patterns to improve our service.

3.2 Newsletter Subscription

If you subscribe to our newsletter, we collect your email address. This data is used solely to send you our newsletter and is processed by our email service provider, Resend (see Section 6).

4. Cookies

Our website uses only functional cookies that are strictly necessary for the operation of the website. These cookies do not require your consent under GDPR as they are essential for providing the service you requested.

Functional cookies we use include:

• Session cookies to maintain your browsing session
• Preference cookies to remember your settings

We do not use advertising cookies or tracking cookies for marketing purposes. However, third-party services embedded on our website (such as Google Maps and YouTube) may set their own cookies (see Section 7).

You can configure your browser to reject cookies or to alert you when cookies are being sent. Please note that some features of our website may not function properly if you disable cookies.

5. Analytics

We use Vercel Analytics to understand how visitors interact with our website. Vercel Analytics is a privacy-focused analytics service that collects aggregated, anonymized data about website usage.

Vercel Analytics collects:

• Page views and navigation patterns
• Geographic location (country level)
• Device and browser information
• Performance metrics

This data is used to improve our website's performance and user experience. Vercel Analytics does not use cookies and does not collect personally identifiable information. For more information, please refer to Vercel's Analytics Privacy Policy.

6. Third-Party Service Providers

We use the following third-party service providers to operate our website:

6.1 Vercel (Hosting)

Our website is hosted on Vercel, Inc. Vercel processes server requests and may collect technical data such as IP addresses for security and performance purposes. Vercel is based in the United States and complies with applicable data protection regulations. For more information, see Vercel's Privacy Policy.

6.2 Cloudflare (CDN)

We use Cloudflare for content delivery and security services. Cloudflare may process your IP address and other technical data to provide its services, including protection against malicious traffic. For more information, see Cloudflare's Privacy Policy.

6.3 NeonDB (Database)

We use NeonDB as our database provider to store website content. NeonDB may process data necessary for providing database services. For more information, see Neon's Privacy Policy.

6.4 Resend (Email Service)

We use Resend to manage our newsletter subscriptions and send emails. When you subscribe to our newsletter, your email address is transmitted to and stored by Resend. For more information, see Resend's Privacy Policy.

7. Embedded Content

Our website may include embedded content from third-party services. When you view pages with embedded content, these providers may collect data about you, set cookies, and monitor your interaction with the embedded content.

7.1 Google Maps

We embed Google Maps to display location information. When you view a page with an embedded map, Google may collect data including your IP address and set cookies. For more information, see Google's Privacy Policy.

7.2 YouTube

We embed YouTube videos on our website. When you view a page with an embedded video, YouTube (operated by Google) may collect data including your IP address and set cookies. We use YouTube's privacy-enhanced mode where possible to minimize data collection. For more information, see Google's Privacy Policy.

8. Data Retention

We retain your personal data only for as long as necessary:

• Server logs: Retained for a limited period for security and debugging purposes, then automatically deleted.
• Newsletter subscriptions: Your email address is retained until you unsubscribe from our newsletter. You can unsubscribe at any time using the link in our emails or by contacting us.
• Analytics data: Aggregated and anonymized, retained as per Vercel's data retention policies.

9. International Data Transfers

Some of our third-party service providers are located outside the European Economic Area (EEA), particularly in the United States. When your data is transferred to these providers, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your personal data.

10. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can request that we correct any inaccurate or incomplete data.
• Right to erasure: You can request that we delete your personal data in certain circumstances.
• Right to restrict processing: You can request that we limit how we use your data.
• Right to data portability: You can request a copy of your data in a structured, machine-readable format.
• Right to object: You can object to the processing of your personal data in certain circumstances.
• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us using the contact information provided in Section 2. You also have the right to lodge a complaint with your local data protection authority.

11. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will post the updated policy on this page with a revised "Last updated" date. We encourage you to review this policy periodically.

12. Contact

If you have any questions about this privacy policy, your personal data, or wish to exercise your rights, please contact us at:

Daniel Busch
Käsenbachstraße 20
72076 Tübingen
Germany

Email: [email protected]

Last updated: December 12, 2025