Privacy Policy for JETSURF.guide and the JETSURF Guide App
Last updated: 24.09.2026
1. Controller
Jens Fabian Kusche / MotoSurf Store
Borweg 126A, 32547 Bad Oeynhausen, Germany
info@jetsurf.guide
2. Overview
No user account is required. We do not create user profiles or use advertising tracking. Personal data is processed only to operate the service securely, provide map functions, or handle a spot submission or comment you deliberately send.
3. Website and server logs
Your device transmits technically necessary connection data such as IP address, time, requested URL, referrer, browser and operating system. We process it for delivery, stability and abuse prevention under Art. 6(1)(f) GDPR. Logs are erased when no longer needed, unless a specific security incident or legal duty requires longer retention. Hosting and technical providers receive only data necessary for their work.
4. Web map and location
The web map loads street tiles from OpenStreetMap and optional satellite tiles from Esri; your IP address and technical request data are sent to the selected provider. Place searches are relayed server-side to Nominatim/OpenStreetMap. Legal basis: Art. 6(1)(f) GDPR. See OpenStreetMap Foundation Privacy Policy and Esri Privacy Statement. Browser location is used only after device permission, for centring the map or as the proposed spot position when you actively submit it.
5. iOS/iPadOS app and Apple Maps
The app obtains spot data from JETSURF.guide and stores your language choice locally. It uses GPS to centre the map and does not send your movement history to JETSURF.guide. Search, maps and navigation use Apple MapKit/Apple Maps; Apple processes technical, search, map and, with permission, location data under its own responsibility. See Apple Maps & Privacy.
6. Spot submissions and comments
Spot submissions contain the spot name, region, coordinates, category, description, email address and optional name. Comments contain the comment, email, optional name and language. We process them for moderation, queries and possible publication on the basis of your consent (Art. 6(1)(a) GDPR). You may withdraw consent for the future at any time. Submission contact data and comment email addresses are removed after the moderation decision. An optional comment name may be published with an approved comment. Comment text may be sent server-side to DeepL SE for translation; email addresses are not sent. See DeepL Privacy Policy.
7. Abuse prevention, storage and cookies
For rate limiting, the IP address is converted into a salted, non-reversible hash kept for one hour. No external CAPTCHA is used. There are no analytics or advertising cookies. Strictly necessary local storage supports language, security and requested offline/install functions. Legal bases are Art. 6(1)(f) GDPR and, where applicable, Section 25(2)(2) TDDDG.
8. Recipients, transfers and rights
Recipients may include hosting, email, map, translation and Apple service providers. Where processing occurs outside the EEA, an adequacy decision or safeguards under Arts. 44 et seq. GDPR are used. You may request access, rectification, erasure, restriction, portability and object; you may withdraw consent and complain to a supervisory authority, particularly the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen. Contact the controller above. We do not use profiling or automated decisions.