Privacy Policy

Who we are

Gasovia (gasovia.com and the Gasovia mobile app) is a free, independent project, built and maintained by Rafael Teixeira, an individual developer based in Portugal, who is the data controller for the personal data described here. For any privacy question or request, contact us at info@gasovia.com.

What we collect and why

• Location. Only when you allow it, we use your device's location to centre the map and find nearby stations. The coordinates are sent to our servers to look up stations and are not stored against your account. Legal basis: your consent (the browser or device permission), which you can withdraw at any time in your settings.
• Account data. Every visitor gets an anonymous identity (a random ID from Firebase Authentication) so the app can talk to our servers; it holds no personal details. If you sign in with email/password, Google or Apple, we store your email address and display name, and the vehicles, fuel discounts and display preferences you save, so they follow you across devices. Legal basis: performing our agreement with you (providing the service you asked for).
• Searches and routes. Places you search for and the start and end points of routes you plan are sent to our servers to geocode and calculate the route. They are not stored against your account. Legal basis: performing our agreement with you.
• Server logs and security. Our servers log requests (including your IP address and the requested URL, which may contain map coordinates) and use Cloudflare Turnstile to block bots and abuse. Legal basis: our legitimate interest in keeping the service secure and working.
• Error monitoring and bug reports. Sentry records crashes and errors, with technical details such as browser, device and the page you were on. If you send a bug report, it includes your message and, if you give it, your email address. Legal basis: our legitimate interest in fixing bugs.
• Analytics (optional). Only if you accept analytics cookies, we use Google Analytics (via Firebase) to understand which features are used. It records pages viewed, feature usage and device/browser details, linked to a random analytics ID (and to your account ID if you are signed in). It is never used for advertising. Legal basis: your consent.

We do not sell personal data, show ads, or use your data for profiling or automated decisions about you.

Cookies and local storage

These are needed for the site to work, so they don't require consent:

• __session cookie: remembers your language (1 year).
• geo-country cookie: your country, estimated from your IP address, to pick a sensible default map region (1 year).
• geo-approx cookie: your approximate (city-level) location, estimated from your IP address, so the map opens near you without asking for precise location (1 day).
• Firebase Authentication storage: keeps you signed in (anonymously or with your account) until you sign out or clear your browser data.
• Local storage for your settings (units, map style, brand filter, saved preferences, dismissed notices) and for your cookie choice.
• Cloudflare Turnstile: a short-lived security check against bots.

These are only set if you accept analytics cookies: _ga and _ga_* (Google Analytics, up to 2 years). If you reject or later withdraw consent, we stop analytics and delete these cookies. You can change your choice at any time here or under Profile → Analytics cookies.

Where your data is processed

Gasovia's servers run on Google Cloud in Belgium (europe-west1), and our database is hosted in Lisbon, Portugal. We rely on these service providers, each acting on our behalf under its data-processing terms:

• Google Cloud (hosting) and Google Firebase (authentication, analytics).
• Sentry (error monitoring and bug reports, stored in the EU, Germany).
• Cloudflare (bot protection with Turnstile).
• Map and routing providers: map tiles are loaded from CARTO and OpenFreeMap; place search and routing use Photon (Komoot), openrouteservice (HeiGIT), OSRM and Google Maps Platform. Map tile providers see your IP address and the map area you are viewing; routing providers receive only the coordinates being searched or routed, not who you are.

Some of these providers (notably Google and Cloudflare) are based in the United States and may process data there. Those transfers rely on the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.

How long we keep it

• Account data (email, name, vehicles, discounts, preferences): until you delete your account.
• Server logs: up to 30 days.
• Error reports and bug reports: up to 90 days.
• Analytics data (only with your consent): 2 months.
• Location, searches and routes: not stored beyond the logs above.

Deleting your account

If you are signed in, you can permanently delete your account at any time from Profile → Delete account, on the website or in the app. This immediately removes your account, vehicles, discounts and preferences from our database and deletes your sign-in account. Copies in server logs and error reports expire within the periods above. If you can't sign in, email info@gasovia.comfrom the address on the account and we'll delete it for you.

Your rights

Under the GDPR you have the right to access the personal data we hold about you, to correct it, to have it deleted, to receive it in a portable format, to restrict or object to how we process it, and to withdraw consent at any time (without affecting processing done before you withdrew). Email info@gasovia.comand we'll respond within one month.

You also have the right to lodge a complaint with a data protection authority — in Portugal, the Comissão Nacional de Proteção de Dados (cnpd.pt), or the authority in the EU country where you live.

Children

Gasovia is not directed at children under 16, and we do not knowingly collect personal data from them.

Changes to this policy

We may update this policy as Gasovia evolves. We'll update the "last updated" date above when we do, and ask for your consent again if we start using cookies or data in a way that needs it. See also our Terms of Service.