Privacy

1. Who we are

Clouded is operated by Noah Middleton, trading as Clouded, an individual established in the United Kingdom. Clouded is not a limited company. For the information described in this notice, Noah Middleton is the controller.

Address: Apartment 204, Red, Media City, M50 2AL, United Kingdom.

2. What information Clouded processes

Depending on the choices you make, Clouded processes:

• essential settings such as your 18+ acknowledgement, consent preference, location intent, navigation state, saved map view, and privacy-page return path;
• optional analytics data, including a pseudonymous browser identifier, a session identifier, page paths, selected venue and Route identifiers, and limited interaction events;
• limited attribution data after analytics consent: source, medium, campaign, content, term, and the referring site’s hostname; and
• your live location when you explicitly turn on a location feature, as explained below.

3. Why we process it

Essential storage is used where needed to provide features you request and remember your privacy choices. Optional analytics is used only with your consent, to understand which pages and places are useful and where Clouded can be improved.

Location is used only to provide location-based map and walking-direction features that you start. It is not used for advertising or analytics profiling.

4. Analytics

Clouded uses its own first-party analytics only after you choose “Accept analytics”. If you reject optional analytics, Clouded does not create an analytics visitor or session for your browser and does not record analytics events.

When analytics is on, Clouded creates pseudonymous visitor and session identifiers. They are random and are not based on your IP address, location, email, browser fingerprint, or device characteristics. Pseudonymous does not mean anonymous: the identifiers allow visits from the same consenting browser to be recognised.

Current analytics events cover page views, venue and Route views, clicks to venue websites, menus and booking pages, and the start of directions. Stored page paths do not include query strings or fragments. Referrers are reduced to a hostname. Clouded analytics does not store IP addresses, precise coordinates, destination URLs, raw free-text searches, or browser and device fingerprints. Clouded uses no advertising trackers or third-party analytics SDK.

You can withdraw consent at any time in the privacy controls. This stops future analytics immediately and removes the analytics identifiers from your browser. It does not automatically rewrite or delete analytics and consent records already collected. Applicable privacy-rights and deletion requests are handled separately, as explained below.

5. Location and directions

Location is separate from analytics consent and is not on by default. When you turn on a location feature, your precise position is held temporarily in the running app. It is not written to Clouded’s browser storage, database, or analytics.

When you explicitly start directions or navigation, the start and destination coordinates needed to calculate the route are sent to the Valhalla routing service run by FOSSGIS / OpenStreetMap Germany. Clouded does not add those coordinates to its analytics. Turning location off stops the live watch and navigation; browser location permission is managed separately in your browser settings.

6. Browser storage

Clouded uses local storage and session storage, which are browser technologies similar to cookies. Some storage is essential or functional. The analytics visitor and session identifiers are stored only while analytics consent is on. The cookies and storage notice lists every current item, its purpose, and how long it remains.

7. Third-party services

• Supabase stores Clouded’s content, consent records, and first-party analytics data.
• Lovable provides the hosting infrastructure. Like other hosting providers, it may receive ordinary request and network information needed to serve and protect the site. Lovable Visitor analytics is off; this infrastructure activity is not Clouded’s analytics.
• OpenStreetMap tile servers receive ordinary request information plus the map area and zoom needed to supply map imagery when you open the Map.
• FOSSGIS / OpenStreetMap Germany’s Valhalla service receives the routing coordinates needed to calculate walking directions when you start them.

Clouded does not use Google Fonts or a third-party analytics service: its fonts are served with the site.

8. Data retention

We keep analytics and consent data only for as long as necessary for the purposes described, accountability, and applicable legal obligations. Consent and analytics events are recorded as an append-only history, so changing your choice stops future collection but does not itself alter earlier records. We review retention periodically and remove or anonymise data when it is no longer needed, where appropriate.

9. Your choices and rights

You can accept, reject, or later withdraw analytics consent through the privacy controls. Marketing tracking is not currently used. Geolocation is a separate choice and can be turned off in Clouded and in your browser.

Depending on where you live and the circumstances, you may have rights to access, correct, erase, restrict, object to, or receive a portable copy of your personal data. You may withdraw consent at any time without affecting processing carried out before withdrawal. To make a request, contact us below. We may need enough information to find the relevant record and verify the request.

You may also complain to the UK Information Commissioner’s Office, or to the data protection authority where you live or work where applicable.

10. Contact

Privacy enquiries and rights requests: noah@cloudedamsterdam.com. You can also write to the postal address in section 1.