Last updated: January 5, 2026
This privacy policy informs you about the nature, scope, and purpose of the processing of personal data within our app "Swipesight" and the associated promotional website.
1. Controller
Leo Nobis
Boltensternstr. 18
40239 Düsseldorf
Germany
Email: contact@leonobis.com
2. Data Processing on the Website
a) Hosting (Vercel)
Our website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Whenever you visit our website, Vercel automatically records server log files, which typically contain your IP address, the time of access, browser type, and the page viewed. This data is used to ensure the stable and secure operation of the website.
b) Contact
If you contact us via email, the data you provide (e.g., your email address and request) will be stored for the purpose of processing your inquiry.
c) Newsletter
On our website, you have the option to subscribe to our newsletter. For this purpose, we require your email address. To send the newsletter, we use the service MailerLite, operated by MailerLite Limited, 38 Upper Mount Street, Dublin 2, Ireland. When you subscribe, your email address is transmitted to MailerLite via our API and stored there. The legal basis for this processing is your consent (Art. 6(1)(a) GDPR). You can unsubscribe from the newsletter at any time via a link provided in every email.
d) Cookies & Analytics
Our promotional website currently does not use cookies and does not employ external analysis tools such as Google Analytics.
3. Data Processing in the App "Swipesight"
a) Registration and Authentication
To manage user accounts, we use Firebase Authentication, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also be processed on Google servers in the USA.
The following login methods are supported:
- Anonymous Authentication: When the app is started for the first time, a temporary, anonymous account is created (anonymous user ID) to allow immediate use of the core functions.
- Google Sign-In: If you sign in with your Google account, we process your email address, your name, and your Google user ID. We do not gain access to your Google password.
b) Data for App Functionality
- Location Data & Maps:
- Location Query: The app requests your device location to display sights in your vicinity and to mark your position on the map.
- Image Upload: When uploading an image, the app reads the EXIF location data from the image (with your explicit permission) to suggest matching sights.
- Navigation: If you use the navigation feature, the coordinates of the selected sight are passed to the map application installed on your device (e.g., Google Maps App). In doing so, you technically leave our app environment.
- Access to Photo Gallery: The app only accesses your photo gallery if you actively wish to upload an image.
c) User-Generated Data
The following data, which you actively create in the app, is stored on our servers:
- Username
- Ratings ("Likes" and "Dislikes")
- Uploaded images (including metadata)
- Reports on content
- List of blocked users
- Visit data (timestamps of marked places)
d) App Usage Analysis
We use Firebase Analytics and Firebase Crashlytics (Google services) to receive crash reports and anonymized usage statistics. This helps us to fix bugs and improve app stability.
4. Service Providers and Infrastructure
We share data with the following service providers who are contractually bound to us:
- Backend & Database: Netcup GmbH (Germany). This is where our app logic runs.
- Image Storage & Delivery (CDN): Images are stored with Amazon Web Services (AWS) (Service S3, Frankfurt Region). For faster display, we use the Content Delivery Network AWS CloudFront. Encrypted image data may be temporarily cached on AWS servers worldwide to reduce loading times.
- Map Material (In-App): To display maps within the app, we use OpenFreeMap (based on MapLibre). When loading map tiles, your IP address is technically transferred to the servers of OpenFreeMap (or their hosting provider) to send the map data to your device.
- Newsletter: MailerLite (Ireland), see section 2c.
- Authentication & Analytics: Google Firebase (Ireland/USA).
5. Data Security and International Transfers
- Encryption: All communication (e.g., between the app and backend) is encrypted via SSL/TLS.
- Third Countries (USA): We use services from providers that are partially based in the USA or have US parent companies (Google/Firebase, AWS, Vercel). Should data be transferred to the USA, we ensure that appropriate guarantees are in place (e.g., EU Standard Contractual Clauses) to guarantee an adequate level of data protection.
6. Right to Deletion (Account Deletion)
You can delete your account directly in the app under the profile settings ("Delete my account"). This process is irreversible and deletes:
- Your user account with Firebase.
- All your favorites, ratings, visit data, and the list of blocked users.
- All images uploaded by you from our AWS storage.
- Your reports will be anonymized.
7. Your Rights
You have the right to access, rectification, erasure, and restriction of processing of your data. Please contact us at the email address provided in the imprint. Furthermore, you have the right to lodge a complaint with a data protection supervisory authority.