the fine print

Privacy policy

This website and its live demo set no cookies, need no account and keep no profile of you. This page explains which data is processed anyway, by whom and why.

Data controller

Hosting and server logs

The website and the demo are static files hosted on GitHub Pages, a service of GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA. When you open a page or file, your browser sends GitHub your IP address together with the usual request data: the address requested, time, referrer and browser details (user agent). GitHub states that the IP address of every visitor to a GitHub Pages site is logged and stored for security purposes. We have no access to these logs.

The purpose is to deliver the website securely and reliably. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is offering the website and the demo without running a server of our own. GitHub may process the data in the USA. GitHub, Inc. is certified under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Article 45 GDPR). How long GitHub keeps its logs is set out in its privacy statement.

• GitHub General Privacy Statement
• GitHub Pages: data collection

Fonts

All fonts are served from this website itself. Your browser makes no requests to font services or other third parties for them.

No cookies – what is stored in your browser

No cookies are set. A few settings are kept in your browser’s localStorage so the website and the demo remember the choices you make. They never leave your browser, contain no identifier, are not read by us and stay until you clear your browser’s site data. Storing them is necessary for the functions you use, so no consent is needed (section 165(3) of the Austrian Telecommunications Act, TKG 2021).

• rc_site_theme – light, dark or automatic theme of this website
• rc_theme – light, dark or automatic theme of the demo
• rc_sidebar, rc_nav_open – whether the demo’s sidebar and its submenus are open
• rc_days, rc_basis – the period and the zone basis (power or heart rate) chosen in the demo
• rc_table_view, rc_table_group:… – table or tile view and the grouping of the demo’s lists
• cabin_blocked – only if you opt out of Cabin Analytics (see below)

Cabin Analytics

The website and the demo use Cabin Analytics, provided by Nic Mulvaney LTD, United Kingdom, to count visits in a privacy-friendly way. The script is loaded from helge.casquette.es. According to Cabin, it uses no cookies, no persistent identifiers and no fingerprinting, and it creates no visitor profiles.

On each visit Cabin receives the page address (including campaign parameters in it), the referring page, screen width, load time, time spent on the page, how far you scrolled, the time of the visit, and your browser, device, operating system and language as your browser reports them. Your IP address is transmitted with the request; Cabin states that it holds the address in memory only to look up your country and then discards it, without ever writing it to disk. Only aggregated statistics are stored.

We also count a few clicks as custom events. Each has a fixed name and carries nothing about you – no text you entered, no identifier:

• See the demo
• Open GitHub
• Copy clone command
• Copy demo command
• Copy connect command
• Copy sync command

Cabin stores and processes analytics data in Amazon Web Services’ Ireland (EU) region. Requests may first reach a collection endpoint in another region, which passes them on to Ireland without writing them to disk. The United Kingdom, where the provider is based, is recognised by the European Commission as providing an adequate level of data protection (Article 45 GDPR). The statistics are kept for as long as this website is registered with Cabin.

The legal basis is Article 6(1)(f) GDPR; our legitimate interest is understanding how the website is used while processing as little personal data as possible. To opt out, block helge.casquette.es with a content blocker, or run cabin.blockMe(true) in your browser’s developer console on this site, which stores cabin_blocked as described above.

• Cabin: privacy
• Cabin privacy policy

The live demo

The demo under /demo/ shows Casquette with synthetic rides – made-up data, no real person’s activities. It is a set of static files that runs entirely in your browser: there is no account, no sign-in, no connection to Strava, and nothing you do in it is sent to us.

Its map pages load map tiles from the OpenStreetMap Foundation, United Kingdom, at tile.openstreetmap.org. For this your browser sends the Foundation your IP address, the requested map section, the page it was requested from and your browser details. According to the Foundation, such data is stored in the United Kingdom and the Netherlands; the tiles are delivered through a global network of cache servers run by a content delivery network, which may also process the request outside the EU. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is showing maps without an API key or a commercial map provider. The demo makes no other requests to third parties.

• OpenStreetMap Foundation privacy policy

Contact by email

This website has no contact form. Clicking an email link sends nothing to us; data is processed only if you choose to write an email. We then process your email address, your message and anything you include in it to answer you, together with our email provider. The legal basis is Article 6(1)(f) GDPR, our legitimate interest in answering enquiries, and Article 6(1)(c) GDPR where the law requires processing. Your email is deleted when it is no longer needed, unless the law requires us to keep it.

Recipients and international transfers

Recipients are GitHub (hosting, USA – EU-US Data Privacy Framework), Cabin (analytics, United Kingdom – adequacy decision; data stored in Ireland)and, when you open the demo’s maps, the OpenStreetMap Foundation (map tiles, United Kingdom – adequacy decision). Where needed, emails are processed by our email provider, and data may be passed to IT or legal advisers or to authorities if the law requires it. We do not sell data or use it for advertising.

Your rights

Under the conditions of the GDPR you have the right to access your personal data (Article 15), to have it corrected (Article 16) or erased (Article 17), to restrict its processing (Article 18) and to receive it in a portable format (Article 20).

You have the right to object, on grounds relating to your particular situation, at any time to processing based on Article 6(1)(f) GDPR (Article 21). We then stop the processing unless there are compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves legal claims. Send requests to the email address above.

You also have the right to lodge a complaint with a supervisory authority. In Austria this is the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at.

We update this policy when the website, the demo or the services they use change.