Short version: this website sets no cookies as you browse it and has no accounts. It counts its own page views and downloads as daily totals — without IP addresses, identifiers or third-party services — so nothing here identifies you. The app runs on your computer and keeps your data there.
1. Controller. The controller under the GDPR is Tobias Kloos, Munich, Germany, reachable at wattsoever.cc@gmail.com (postal address on request) — see the legal notice above. There is no data protection officer; the project is run by one private individual and is not required to appoint one.
2. Website hosting. This site is hosted on Cloudflare Workers (Cloudflare, Inc.). When you visit, Cloudflare technically processes your IP address and standard request data (browser, time, requested page) in server logs to deliver the site and defend against attacks — legal basis Art. 6 (1)(f) GDPR (legitimate interest in secure, efficient delivery). No cookies are set as you browse this site, and no analytics or tracking runs beyond section 3. See
Cloudflare's privacy policy.
3. Usage statistics. This site counts its own page views, on its own infrastructure and without any third-party analytics service. For each page request the server increments one daily total per page, country (derived by Cloudflare from your IP address at request time), operating-system family (Windows, macOS, Linux, iOS, Android or other, derived from the browser's user-agent header) and referring website (domain only). Only these totals are stored — never your IP address, the user-agent string, a full referrer URL, a cookie or any identifier — so the records cannot be linked to you or to a device. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in understanding how the site is used). No consent banner is required, as nothing is stored on your device and no personal data is retained.
4. Downloads. Installers are served from this domain; the files are stored with Cloudflare, Inc. (R2 object storage) and pass through the same infrastructure as the pages. Each completed download is counted in the same aggregated way as in section 3 — one daily total per version, platform and country — so we can see how many copies of which release were downloaded and from which countries, without knowing by whom. Legal basis: Art. 6 (1)(f) GDPR.
5. Fonts and icons. The typefaces Big Shoulders Display, Figtree and DM Mono are self-hosted and delivered from this website's own origin; the Remix Icon symbols are embedded in the pages themselves — no font CDN, no third-party font or icon provider, no data transmitted to font services.
6. Map tiles on the home page. The animated 3D flyover at the top of the home page is rendered live in your browser (MapLibre GL JS, self-hosted) and loads map tiles from OpenFreeMap (tiles.openfreemap.org, operated by Hyperknot Software Kft., Hungary, delivered through Cloudflare, Inc.) and terrain elevation tiles from AWS S3 (Mapzen Terrarium, s3.amazonaws.com). The flyover can also load on small screens; when your system requests reduced motion, it shows a still map frame instead of moving the camera. These tile requests can therefore occur in both cases when the map starts successfully. If WebGL, the map script or route data is unavailable, the flyover stays on its dark fallback and does not request those tiles. The small relief map in the "Two modes" section is a static image served by this website and contacts no map service. OpenFreeMap states that its server logs contain no IP addresses (
privacy policy). The providers technically see your IP address and standard request data when the tiles are fetched — legal basis Art. 6 (1)(f) GDPR (legitimate interest in presenting the app's map view as it actually works). The website itself sets no cookies for these map requests; the tile providers receive the request data needed to serve them.
7. The app itself. Wattsoever runs locally. Rider profiles, workouts, saved routes and ride recordings stay on your device. Importing a GPX route normally queries opentopodata.org for Mapzen elevation data; the route coordinates are sent to that service. When an app update improves the elevation processing, routes you imported earlier are recalculated once at startup with the same request. A locally configured elevation source may avoid that request. Map and 3D views request map tiles from OpenFreeMap and terrain tiles from AWS during use; those providers technically receive your IP address and standard request data. The app loads only the map tiles it shows and keeps them locally; it never downloads map areas in advance. Map sources you add yourself are loaded directly from the provider you entered, under that provider's terms. If the connection or necessary tiles are unavailable during a ride, a tile-free 2D route drawing is used. After successful import, the saved route and workout can be ridden offline. Strava is contacted only if you use the Strava upload: the app then opens strava.com in its own window, you sign in directly with Strava, and the app selects the ride's FIT file and pre-fills the upload form for you to review and save. The planned update check would contact wattsoever.cc; the planned Komoot import would contact Komoot only if used. The app does not send ride or profile data to a Wattsoever server. The app's
license agreement lists these services in section 5.
8. Transfers to third countries. The providers named in sections 2, 3, 4 and 6 — Cloudflare, Inc. (also delivering OpenFreeMap's tiles) and Amazon Web Services — are based in the United States; OpenFreeMap's operator is based in Hungary (EU). The technical data described there, in particular your IP address, is therefore transferred to a third country. Each of these transfers rests either on the provider's certification under the EU–US Data Privacy Framework, for which the European Commission adopted an adequacy decision on 10 July 2023 (Art. 45 GDPR), or on the European Commission's Standard Contractual Clauses (Art. 46 (2)(c) GDPR); which safeguard applies is set out in the provider's own privacy notice linked above. No data is transferred to any other third country, and none of these transfers involves more than the request data technically required to deliver a page or a tile.
9. Storage periods. This website keeps no personal data of its own: the only records we hold are the aggregated daily totals described in sections 3 and 4, which contain no personal data and are kept indefinitely; there is no user account, no contact form and no log kept by us. Retention is therefore determined entirely by the providers named above, each under its own responsibility and for the periods stated in its privacy notice — the governing criterion being the time needed for secure delivery, defence against attacks and aggregate statistics, after which request data is deleted or aggregated beyond any link to you. E-mails you send to the address in the legal notice are kept only as long as needed to deal with your enquiry and are then deleted.
10. Your rights. You have the rights of access, rectification, erasure, restriction, portability and objection under Art. 15–21 GDPR, and the right to complain to a supervisory authority. You may object at any time to the processing described in sections 2, 3, 4 and 6, which relies on Art. 6 (1)(f) GDPR. Since this site stores no personal data itself, such requests usually concern the hosting providers named above. Contact for privacy matters: the e-mail address in the legal notice.
Data attribution: map tiles OpenFreeMap © OpenMapTiles, map data © OpenStreetMap contributors (ODbL); terrain tiles © Mapzen (Terrarium, via AWS); route elevations via opentopodata.org (Mapzen dataset). Map rendering on this site: MapLibre GL JS (BSD-3-Clause).