Privacy Policy
Last Updated:
1. Who we are
Map of Croatia is run by Cartography j.d.o.o., a Croatian simple limited liability company. We are the data controller responsible for your personal data.
Address: Stjepana Radića 1, 49221 Bedekovčina, Croatia
Registered at: Trgovački sud u Zagrebu
Email: hello@mapofcroatia.com
Website: mapofcroatia.com (app at app.mapofcroatia.com)
We are not required to appoint a Data Protection Officer and have not done so. For any privacy question, email hello@mapofcroatia.com.
2. What we collect
We only collect what we need to sell you the map and run your account.
When you buy and create an account:
Your email address.
Your password, if you sign up with email. It is stored only in encrypted (hashed) form by our login provider, Supabase, so we never see it. If you sign in with Google instead, you do not set a password with us.
Your purchase details from Whop, our payment provider and merchant of record: your name, billing email, billing country, and the amount, currency and date of the payment. We never see or store your card number; Whop handles that.
Automatically, when you use the web app:
Your IP address, browser and device type, and basic log data.
The map interaction needed to load and show the map (map tiles are served by Mapbox).
When you contact us:
The content of your message and our reply.
We do not collect special category data (such as health, religion, or political views), and we do not run a newsletter or any marketing email list.
3. Why we use it, and our legal basis
To run your account, give you the map, take payment, and email your receipt and access details: performing our contract with you (GDPR Art. 6(1)(b)).
To keep the service secure and prevent fraud and abuse: our legitimate interest in protecting the service and our customers (Art. 6(1)(f)).
To answer your support messages: performing the contract, or our legitimate interest in replying to you (Art. 6(1)(b)/(f)).
To keep invoices and accounting records: a legal obligation under Croatian tax and accounting law (Art. 6(1)(c)).
4. Who we share it with
We never sell your data. We share it only with the providers that run the service for us, each under a data processing agreement:
Supabase — our database and login/accounts.
Vercel — hosting for the web app.
Mapbox — the map tiles.
Whop — payment processing, as our merchant of record. Whop handles your card details directly.
Google — only if you choose to sign in with Google.
We may also share data with our accountant and the Croatian tax authorities to meet our legal obligations, or with authorities where the law requires it.
5. Sending data outside the EU
Some providers (Whop, Vercel, Mapbox, Google) are based in the United States. Where your data goes outside the European Economic Area, it is protected by an approved safeguard, either the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
6. How long we keep it
Account data: for as long as your account is active. If you ask us to delete your account, we remove it, apart from records we must keep by law.
Invoices and accounting records: 11 years, as required by the Croatian Accounting Act.
Support emails: no longer than 2 years.
Server and security logs: no longer than 12 months.
7. Your rights
Under the GDPR you can ask us to: give you a copy of your data (access), correct it, delete it, restrict how we use it, send it to you or another provider (portability), and object to use based on our legitimate interests. Where we rely on your consent, you can withdraw it at any time.
To use any of these, email hello@mapofcroatia.com. We reply within one month and do not charge a fee, and we may ask you to confirm your identity first. We cannot delete invoices and tax records we are legally required to keep.
8. Cookies
The web app uses one essential technology: the login session set by Supabase, which keeps you signed in. It is required for your account to work, so it needs no consent. We do not use analytics or advertising cookies, and we do not track you across other websites.
9. Children
Map of Croatia is for adults. You must be at least 16 to create an account or buy access. We do not knowingly collect data from anyone younger. If you think a child has given us their data, email us and we will delete it.
10. Automated decisions
We do not make decisions about you by automated means, and we do not profile you.
11. Complaints
If you think we have mishandled your data, please email us first so we can fix it. You also have the right to complain to the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr. You may also complain to the data protection authority in your own EU country.
12. Changes
If we change this policy, we will update the date above and, for important changes, let you know by email or in the app.
13. Contact
Cartography j.d.o.o., Stjepana Radića 1, 49221 Bedekovčina, Croatia. Email: hello@mapofcroatia.com.