Privacy policy
Version: 14 November 2026. The German version is the legally binding one.
Draft: this text is a careful draft based on how the app actually works. It is not legal advice. It must be reviewed, and all highlighted fields completed, before publication.
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) for the app "Frankfurt Sightseeing" (working title) and this website is:
[[TODO: name of controller / provider, incl. legal form if any]]
[[TODO: street, number, postcode, city, country (postal address for service)]]
Email: [[TODO: email address]]
See also the imprint.
2. In short
- The app needs no user account. We operate no servers of our own for the app.
- Your location is used on your device only (position on the map, distance to stops) and is never transmitted.
- Anonymous usage events and crash reports go to Google Firebase only after you consent. You can withdraw consent at any time in Settings.
- Purchases are handled by Google Play. We receive and store no payment data.
- This website sets no cookies and uses no tracking, no external fonts and no embedded content.
3. The app
3.1 Data that stays on your device
Favourites, "My Trip", language setting, theme setting, your consent choice, and cached purchase entitlements and store prices are stored locally on your device. They are not transmitted to us and are deleted when you uninstall the app. Map and content data are bundled in the app (map data from OpenStreetMap); the app works fully offline.
3.2 Location
The app asks for location permission only when you tap "locate me" for the first time. The permission is optional; the app works without it. Location is processed on the device only (position on the map, distance to tour stops, nearby stops) and is not transmitted to us or to third parties. It is also not part of the usage events in section 3.3.
3.3 Usage statistics and crash reports (Google Firebase)
On first start the app asks whether you allow anonymous usage statistics and crash reports. "Accept" and "Decline" have equal prominence; the app is fully usable with either choice. Without consent no events and no crash reports are sent, and collection is disabled at SDK level.
With your consent the app uses Firebase Analytics and Firebase Crashlytics of Google Ireland Limited. The following events are sent; their parameters contain identifiers (IDs) only, no names, no contact data and no location:
- Screen views (
screen_view), opening a sight (poi_opened, with origin), search (search_performed, result count only) - Opening, starting and completing a tour (
tour_opened,tour_started,tour_completed, with tour ID) - Purchase steps (
purchase_started,purchase_completed,purchase_failedwith reason,purchases_restoredwith count; with product ID) - Opening a ticket or deal link (
affiliate_link_opened, with sight or deal ID, provider and placement) - Crash reports for uncaught errors in the app
As a technical matter, according to Google the Firebase services also collect device and app information (for example device model, operating system version, app version) and a pseudonymous app-instance identifier. [[TODO: check which automatically collected data is active in the final Firebase project and adjust this paragraph if needed]]
Legal basis: your consent, Art. 6(1)(a) GDPR (and § 25(1) TDDDG for access to information on your device). Withdrawal: at any time with effect for the future in the app under "Settings"; processing carried out before that remains lawful.
Storage period: Google stores event data for the period configured in the Firebase project: [[TODO: event-data retention period configured in the Firebase project]]. Crash reports: [[TODO: retention period of Crashlytics data according to Google or project setting]].
3.4 Purchases (Google Play)
Paid tours are sold as a one-time purchase through Google Play. Google (Google Ireland Limited or Google LLC) handles payment; we receive and store no payment data. The app asks Google Play which purchases your account owns and stores the entitlement locally. Purchases are restored through your Google account. We have no user accounts and no server-side checks.
Legal basis: performance of a contract, Art. 6(1)(b) GDPR. Google Play's own privacy notices also apply.
3.5 Ticket and deal links (external providers, affiliate)
Ticket and deal links open the websites of external providers in your device's browser, for example GetYourGuide, Viator, Tiqets or official sight websites. You leave the app only when you tap such a link; from then on the privacy policy and cookie settings of that provider apply, which we do not control. Some of these links are affiliate links and are marked as advertising in the app: the link contains our partner ID and an ID of the sight so that the provider can attribute a purchase and pay us a commission. This costs you nothing extra. The providers process your data under their own responsibility.
3.6 Map data
The map is bundled in the app (data from OpenStreetMap, © OpenStreetMap contributors, ODbL). The app does not load map data from third parties at runtime.
4. This website
The website is static. It uses no cookies, no tracking, no analytics tools, no external fonts, no third-party scripts and no embedded content; all files are loaded from the same domain.
When you visit, the hosting provider processes technically necessary connection data in server log files (IP address, date and time, requested page, browser and system information, amount of data, status code) to deliver the site and keep it secure and stable. Hosting provider: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (service "Cloudflare Pages"); privacy policy: https://www.cloudflare.com/privacypolicy/. The site is delivered through Cloudflare's global network; connection data may therefore also be processed in the USA. A data processing agreement under Art. 28 GDPR is in place with the provider. [[TODO: confirm that the data processing agreement has been concluded]]
Legal basis: legitimate interest in secure and stable operation of the website, Art. 6(1)(f) GDPR. Storage period: [[TODO: retention period of server logs at the hosting provider]].
Third-party sites we link to are outside our control.
5. Recipients and processors
| Recipient | Purpose | Data |
|---|---|---|
| Google Ireland Limited (Firebase Analytics, Crashlytics) | Usage statistics, crash reports, only with consent | pseudonymous events and crash data (section 3.3) |
| Google (Google Play) | Buying and restoring tours | purchase data between you and Google |
| External providers (GetYourGuide, Viator, Tiqets and others) | Ticket purchase after you tap a link | what your browser sends to the provider |
| Website hosting provider | Delivering the website | server log data (section 4) |
6. Transfers to third countries
Google may transfer and process data in countries outside the European Economic Area, in particular the USA. According to Google, such transfers rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework and/or on standard contractual clauses. [[TODO: check the current certification status of Google and of the hosting provider and confirm here]] Where you consent to usage statistics you also agree to this transfer under Art. 49(1)(a) GDPR; without consent it does not take place for usage statistics.
7. Storage periods
Local data in the app stays until you uninstall the app or change it in the app. Firebase data: see section 3.3. Website server logs: see section 4. If you email us, we keep your message as long as needed to handle it and delete it afterwards unless retention duties apply.
8. Your rights
Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) (Art. 21). You may withdraw consent at any time with effect for the future (Art. 7(3)), in the app under "Settings". Because we cannot assign usage data to individual persons, access or erasure for specific events is possible only to a limited extent. To exercise your rights, contact [[TODO: email address]].
9. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement. Competent authority for us: [[TODO: competent state data protection authority for the controller's seat, with address]].
10. No obligation to provide data, no automated decisions
You are not obliged to provide data; the app can be used without consent to usage statistics and without location permission. No automated decision-making, including profiling, takes place.
11. Changes
We update this policy when the app or the law changes. The version published here applies.