Weitland Home

Privacy Policy

Last updated:

1. Who is responsible

The data controller (Verantwortlicher) within the meaning of Art. 4(7) GDPR is:

Felix Feit
c/o COCENTER, Koppoldstr. 1, 86551 Aichach, Germany
E-Mail: feit.unternehmen@gmail.com

Full contact details are listed in our Impressum.

2. What we collect

Account data

When you sign up we store your e-mail address and a salted hash of your password (handled entirely by Firebase Authentication). You may optionally add a display name and profile photo.

Property data

Anything you create inside the app — property boundaries, elements, tasks, comments, attachments — is stored in Cloud Firestore and Cloud Storage. This data is yours; we do not sell it, profile you on it, or share it with third parties for advertising.

Usage telemetry

We log basic operational events (sign-in, write errors, function invocations) so we can keep the service reliable. These logs do not contain the contents of your tasks or the geometry of your property.

Cookies and local storage

We use the browser's localStorage / IndexedDB to keep you signed in and to cache your most recent property data for offline use. We do not use third-party advertising cookies.

3. Why we process this data — legal bases

  • Contract performance (Art. 6(1)(b) GDPR) — to give you the account you signed up for.
  • Legitimate interest (Art. 6(1)(f) GDPR) — to keep the service secure and operational.
  • Consent (Art. 6(1)(a) GDPR) — for any optional feature where we ask separately, e.g. e-mail notifications you subscribe to.

4. Where your data lives

Weitland runs on Google Firebase. Firestore and Cloud Storage data for this project is hosted in the europe-west3 (Frankfurt, Germany) region. Cloud Functions execute in the same region. Mapbox tile and search requests are routed to Mapbox's global CDN; only the tile coordinates and search query reach Mapbox, never your account or property data.

5. How long we keep it

Account data is retained for as long as you maintain an account. When you delete your account from inside the app, your property data, tasks, comments and attachments are permanently deleted immediately. Backup snapshots are rotated out within 30 days.

6. Your rights under GDPR

You have the right to:

  • access the data we hold about you (Art. 15);
  • have inaccurate data corrected (Art. 16);
  • have your data erased (Art. 17);
  • restrict processing (Art. 18);
  • portability — export your data in a machine-readable format (Art. 20);
  • object to processing based on our legitimate interest (Art. 21);
  • lodge a complaint with a supervisory authority — for users in Germany this is typically the data protection authority of the state where you reside.

To exercise any of these rights, e-mail hello@weitland.app.

7. Sub-processors

We rely on the following sub-processors to deliver the service:

  • Google LLC / Google Ireland Ltd — Firebase Auth, Firestore, Cloud Storage, Cloud Functions, Cloud Logging.
  • Mapbox Inc. — vector tiles and geocoding for the map view. Mapbox receives only viewport-level tile requests.
  • Resend — outbound transactional e-mail (e.g. invitation emails). Resend receives only the recipient address and the message body.
  • Cloudflare Pages — static asset hosting for the landing page and web client.

8. Changes to this policy

We will update this page when our processing materially changes. The date at the top reflects the last revision.