Privacy
Privacy, cookies and storage information. Last updated: 5 November 2026.
Who is responsible?
MY AREA is a brand of Souverän IT, operated by sole proprietor Alexandre Christophe, Schubystrasse 83, 24837 Schleswig, Germany. Contact for privacy enquiries: ratemyarea@outlook.com.
Account, sign-in and private workspace
We process your registration email, account identifier, public alias and passkey public credentials to provide and protect your account. We do not receive your device biometric data or passkey private key. Account emails, profiles, private home assessments, diary entries and server sessions are stored in MongoDB. Private profile answers may include household and noise-sensitivity information. Processing necessary to provide requested account services is based on Article 6(1)(b) GDPR; security and abuse prevention on Article 6(1)(f).
Ratings and location
Area, home, room and landlord ratings are first-hand reports, not independently verified findings. We process the answers and location information you provide to support ratings and research. Public contributions may include your public alias and the fields shown in the publication preview. Exact private area cells, private home details and account emails are separated from public report output; this is not a guarantee of anonymity. Avoid identifying other people or providing sensitive personal information in reports or messages.
Hosting and service providers
Cloudflare delivers the website and may process IP addresses and request/security data. Render hosts the API. MongoDB provides database storage, including registration emails. Microsoft Outlook (a free mailbox) handles messages to ratemyarea@outlook.com and form-notification emails. These services process data to operate the site, provide requested services and handle enquiries, under Articles 6(1)(b) and 6(1)(f) GDPR as applicable.
Maps and address lookup
Map and address features request map tiles from OpenStreetMap, fonts from the MapLibre demo service and address-search results from Mapbox. These providers receive technical request data such as your IP address; Mapbox also receives the address search you enter. Requests occur when you use those features, independently of optional analytics. Do not enter an address you do not want processed by the address-search provider.
Contact form and HubSpot CRM
The contact form is hosted by HubSpot in its EU-region form service and loads automatically when you open Contact. This connects your browser to HubSpot, which receives technical data and may use form-related cookies/storage, independently of optional marketing tracking. Submission sends the role, company, website, email, message, name and optional phone information entered into the form to HubSpot for enquiry handling and CRM; notifications go to our Outlook mailbox. You can email us instead without opening Contact. Enquiry handling relies on Article 6(1)(b) for pre-contractual enquiries and Article 6(1)(f) for other correspondence. Leaving Contact removes the form; that does not undo an enquiry already submitted. Contacting us is not consent to promotional emails.
Necessary cookies and browser storage
The my-area.sid cookie maintains sign-in and has a configured maximum lifetime of 12 hours. The app stores your privacy choice in localStorage under my-area-privacy-v1 until you change it or clear browser data. Service-worker caches store app resources for loading and fallback; they do not make sign-in or report submission work offline. Necessary storage supports requested services (Section 25(2) TDDDG); related personal-data processing relies on Articles 6(1)(b) and 6(1)(f) GDPR.
Google Analytics 4
With your analytics consent, we load Google Analytics tag G-D8B6CX493H to understand website use. Google receives technical and usage information and may set analytics cookies such as _ga and _ga_*. Our initial page-view event excludes URL query strings, fragments and the referring URL; we do not intentionally send registration emails, messages or rating answers. Analytics remains subject to the Google property configuration, including enhanced-measurement settings. Consent is the basis under Article 6(1)(a) GDPR and Section 25(1) TDDDG. No Google Analytics script is requested before analytics opt-in.
HubSpot marketing
With separate marketing consent, we load HubSpot marketing tracking for visitor activity and CRM/marketing analysis. HubSpot can use cookies such as hubspotutk, __hstc, __hssc and __hssrc and may associate visits with a contact where identifiable. This relies on Article 6(1)(a) GDPR and Section 25(1) TDDDG. Rejecting marketing does not prevent sign-in, rating or contacting us by email. Google Analytics and HubSpot marketing choices can be controlled independently.
Google Search Console
We use or plan to use Google Search Console for search visibility and indexing information. Search Console verification does not add an embedded Google search service or an additional visitor-tracking script to this website. Google processes use of its own search services under its own privacy information.
Changing your choices
Use Privacy settings in the footer to accept or reject optional analytics and marketing. Rejection is as accessible as acceptance. Withdrawing a previously enabled category reloads the page after confirmation to stop already loaded scripts and attempts to remove accessible analytics/marketing cookies. You may also clear cookies in your browser. Withdrawal does not affect the lawfulness of processing before withdrawal; third-party or inaccessible cookies may require browser controls.
International processing and retention
Providers may process data outside Germany or the EEA, including in the United States; an EU form region alone does not guarantee EU-only processing. Applicable provider terms, adequacy decisions or safeguards such as standard contractual clauses must be considered for those transfers. We retain account/workspace information while needed to provide your account, and correspondence while needed to handle the enquiry, legal obligations or claims. Provider logs, backups and analytics have their own configured retention periods. Contact us for the applicable retention or deletion details; no universal automatic deletion period is promised.
Your rights and complaints
Subject to applicable conditions, you can request access, correction, erasure, restriction and portability; object to processing based on legitimate interests; and withdraw consent at any time. Contact ratemyarea@outlook.com. You can complain to a supervisory authority, including the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), at datenschutzzentrum.de. Legal retention obligations may limit deletion.
Provider information: Google, HubSpot, Cloudflare, MongoDB, Microsoft, Render.