Privacy policy

What MazeScout stores and why

MazeScout is a directory of family-friendly seasonal attractions. We collect as little as possible to run it, and we separate what is required from what is optional.

Controller

Guy Weemaes
Falckenheiner Str. 13
34369 Hofgeismar
Germany
Email: [email protected]

Required storage

To keep the site working and secure, we store a session cookie, a security (CSRF) token, your sign-in state if you sign in, and the choices you explicitly ask us to save, such as saved places. We also keep a record of actions you submit — reviews, corrections, claims, and photos — so we can moderate and publish them. Sign-in uses one-time email links; we never store passwords.

Optional storage — your choice

• Maps Interactive map tiles are loaded from OpenStreetMap only after you allow functional storage. Your browser then contacts the tile server directly, which shares your IP address with that provider.
• Analytics MazeScout uses self-hosted Matomo at one.mazescout.com. It is loaded only after you allow analytics. When enabled, Matomo runs without cookies, shortens IP addresses, respects your browser’s Do Not Track setting, and does not send analytics data to a third-party analytics provider.
• Marketing Newsletters, partner offers, and sponsored-message measurement each require your separate opt-in and can be withdrawn at any time.

You can change these choices at any time with the “Privacy choices” link in the footer. Choices are stored in your browser.

Hosting, security, and server logs

The site is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Cloudflare may process connection data to protect the service from automated abuse and attacks. Server and security logs can include an IP address, requested URL, browser information, time, and response status. We process this data to operate and secure the service on the basis of Article 6(1)(f) GDPR and erase or aggregate it when it is no longer needed for those purposes. Processing agreements and, where required for transfers outside the EEA, appropriate safeguards such as standard contractual clauses apply.

OpenStreetMap

Interactive maps use tiles from the OpenStreetMap Foundation. They load only after you allow functional storage. Your IP address and basic request information are then sent directly to that provider. You can use MazeScout’s text results without allowing map tiles.

Email and submissions

We send email only when you request it: sign-in links, claim verification, and the notification types you selected when following a place. Every notification type can be turned off individually from your saved-places page.

Retention

We keep account and submission records while they are needed to provide the service, moderate contributions, document consent, meet legal obligations, or resolve disputes. You may request deletion; records that must be retained by law or for the establishment, exercise, or defence of legal claims are restricted and deleted when that purpose ends.

Your rights

Subject to the GDPR’s conditions, you may request access, correction, deletion, restriction, data portability, or object to processing. You may withdraw consent at any time without affecting earlier processing. Contact [email protected]. You may also complain to the Hessian Commissioner for Data Protection and Freedom of Information, Postfach 3163, 65021 Wiesbaden, Germany.

We do not sell personal data and share it only with processors and providers needed for the services described above, or when required by law.

Children

MazeScout is written for parents and guardians planning outings. We do not knowingly collect personal data from children, and we moderate submitted photos to avoid publishing identifiable images of children without consent.