# Privacy notice (GDPR)

Last updated: 2026-09-30 · Data controller: Kotysoft (Tibor Kovacs, an independent developer), Ireland ·
[kotysoftc@gmail.com](mailto:kotysoftc@gmail.com)

## The short answer

The MAPu program **collects no data about you**. It has no user
account, registration, analytics, crash reporting, advertising, cookie, or tracking
code. Your videos, your GPS tracks, and the finished recordings stay on your own
computer at all times. The [mapu.hu](https://mapu.hu/) website
**measures visits only if you agree** (Google Analytics) in the bar
shown at the bottom of the page; if you don't, the website collects no data about
you either. What does go somewhere is the IP address and the usual technical data of
the network requests below, the website visit data if you accepted the measurement,
and your message if you write to us — we describe that honestly. There is no
automated decision-making, and the measurement is not used for advertising or
profiling.

## The website (mapu.hu)

The website is a simple static page: no embedded third-party service, no external
fonts or content delivery network (CDN), and apart from the visit measurement
described below, which starts only with your consent, no cookie or tracking code.
What is unavoidable with any website: the web server of the hosting
provider behind mapu.hu writes your visit — and the download of the installer
— into its ordinary server log (IP address, time, requested file, and what your
browser sends by itself: the browser identifier and the address of the referring
page). We use that log only to operate and secure the server (legal basis:
legitimate interest, GDPR Article 6(1)(f) — a website cannot be run or protected
against attacks without it); we do not analyse it and do not pass it on to anyone.
The hosting provider handles it on our behalf, as a processor (GDPR Article 28); the
server is in the European Union. We keep the web server log in our hosting account for
at most about one month (only the current month's log is ever there); after that it
is deleted automatically. The hosting provider's own server-side logs fall under
the provider's own policy. The page's language
(Hungarian or English) is chosen from the language preference your browser sends
(the Accept-Language header), which is not stored.

## Visit measurement on the website (Google Analytics)

On your first visit, a bar at the bottom of the page asks whether we may measure
visits. **Only if you choose "Accept"** does the page load the Google
Analytics measurement code (from `googletagmanager.com`). If you choose
"No", or neither, no request goes to Google and no cookie is placed on your computer.
The purpose is to see how many people come and from where (which country, which
referring page), which pages they read and how many click the download — so we know
what is worth improving. Legal basis: your consent (GDPR Article 6(1)(a)). The
measurement code places two cookies in your browser (`_ga` and
`_ga_<id>`, for up to 2 years), which let Google tell a returning
visitor apart, and sends the usual technical data of the visit (the page viewed, the
referring page, the browser and device type, the screen size, the language).
According to Google's own description, Google Analytics does not log or store the IP
addresses of visitors from the EU: it uses them only to derive an approximate
location (country, city) and then discards them. The advertising and Google Signals
features are switched off: the measurement is not linked to advertising, to your
Google account or to other sites, and nobody is identified by name. Google (in the EU,
Google Ireland, Dublin) handles the data on our behalf, as a processor (GDPR
Article 28). Google may also process the data outside the EU, in the United States;
this relies on the EU–U.S. Data Privacy Framework, under which Google LLC is
certified, and on standard contractual clauses
([business.safety.google/adsdatatransfers](https://business.safety.google/adsdatatransfers/)).
The measurement data is kept in our Google Analytics account for at most 14 months.
The page remembers your choice in your browser's local storage (this is not a cookie
and is not sent anywhere); you can change it at any time with the "Cookie settings"
link at the bottom of the page, and if you withdraw your consent, the page also
deletes the two cookies. On Google's own data processing:
[policies.google.com/privacy](https://policies.google.com/privacy).

## What happens with your videos

The program reads and processes opened recordings and their telemetry (GPS
position, speed, acceleration, time) locally. The exported video goes into the
folder you choose. **None of this ever goes over the network** —
neither the files nor the GPS track; only the map requests described
below reveal an area. The program
neither modifies nor deletes your original files.

## The program's network connections

The current version of the program reaches out to exactly three places:

  1. **Update check** — on startup, a single short HTTPS request to
      `https://mapu.hu/version.json`, to find out whether a
      newer version exists. This request **carries no data along with
      it**: not your computer, not your videos, not even your own version
      number — the comparison happens on your own machine; the request's browser
      identifier is simply "MAPu-update-check". What the request does reveal, like
      any internet request, is your computer's **IP address** and the
      time of the request. The web server of the hosting provider behind
      mapu.hu writes this into the same ordinary server log as a visit to the
      website — with the same purpose, legal basis and retention as above. If there
      is no network, the app silently continues.

  2. **Map tiles** — the map gauges download the tiles they need
      from `https://tiles.openfreemap.org/`. This means the tile
      provider **receives your IP address and learns which area you
      requested a map for** — roughly speaking, the route you're traveling —,
      together with the usual technical data (such as the identifier of the
      program's built-in browser engine, which may reveal the program's and
      Windows' version). No name, account, key, or other identifier goes with it,
      and we have no access to these requests: the operator of OpenFreeMap handles
      them as an independent controller, under its own privacy policy
      ([openfreemap.org/privacy](https://openfreemap.org/privacy/)). Downloaded tiles
      stay on your computer, in the `%APPDATA%\mapu\tile-cache` folder,
      so the same area renders without a network the second time. The map's
      labels (fonts) and icons are bundled with the app, so no request is made for
      those.

  3. **Terrain tiles** — with terrain switched on, the "3D vehicle on
      the map" gauge downloads elevation tiles from
      `https://tiles.mapterhorn.com/`, the same way as the map tiles: the
      provider receives your IP address and the requested area, with no name, account
      or key. The operator of Mapterhorn handles these requests as an independent
      controller, under its own policy
      ([mapterhorn.com/privacy-policy](https://mapterhorn.com/privacy-policy/);
      the tiles are served by Cloudflare, and request data is kept for at most 30 days).
      Downloaded tiles stay on your computer, in the
      `%APPDATA%\mapu\tile-cache\dem` folder. With terrain switched off, no
      such request is made.

Aside from this, the app calls no other server. Clicking the "download" link
opens your system browser on the release page — from there on, your browser's
own rules apply.

## What it stores on your computer

  - `%APPDATA%\mapu\last-project.json` — your gauge layout (including
      any captions you typed), export settings and — if you set them — the place of
      your start/finish and sector lines (geographic coordinates), so it starts the same way next
      time. The list of videos is deliberately **not** remembered.

  - `%APPDATA%\mapu\ui-settings.json` — the interface settings
      (language, theme, window positions and sizes).

  - `%APPDATA%\mapu\capabilities.json` — what your graphics card
      and the bundled encoder can do (the result of the startup test
      encodings).

  - `%APPDATA%\mapu\tile-cache` — the downloaded map tiles. It can
      be deleted at any time; the program will download whatever it needs
      again.

  - In the same folder, the usual caches of the program's built-in browser
      engine (Chromium); and while encoding, temporary working files in the
      Windows temporary folder.

  - Next to each exported video, a small technical report
      (`<video name>.report.json`): the settings, file names and
      timings — for troubleshooting.

  - The **Log** visible on screen is a text trace of the app's
      run (it is not written to a file). It goes nowhere; if you report a bug,
      it's your choice whether to send it.

These files exist only on your computer; the program sends them nowhere. They can
be safely deleted when the program is uninstalled (the installer does not delete
them by itself, so your settings survive an update).

## If you write to us

If you send an e-mail (a question, a bug report), we use your message and your
e-mail address to reply and to fix the reported problem (legal basis: legitimate
interest, GDPR Article 6(1)(f)). We keep it only as long as needed to close the
matter. The correspondence is stored by Google's Gmail service, under Google's own
privacy policy ([policies.google.com/privacy](https://policies.google.com/privacy)).
If you also send the Log, it may contain file names and folder paths — send only what
you want to.

## Children, your rights, contact

Neither the program nor the website is specifically directed at children, and
we do not knowingly process data about children. What we process about you is the
server-log entry above, the website visit measurement data if you accepted it, and — if
you wrote to us — your message: under the GDPR you
may ask for access to it (information about it), have it corrected or erased, have
its processing restricted, or object to it; we reply within one month. An IP address
in the log cannot be tied to you by name, so a request about the log needs to state
when you visited or when the request was sent from your computer. The controller is not a company but a private individual:
**Kotysoft (Tibor Kovacs, an independent developer)**, Ireland —
"Kotysoft" is the publishing name; e-mail:
[kotysoftc@gmail.com](mailto:kotysoftc@gmail.com). You may lodge a
complaint with the controller's supervisory authority, the Irish Data Protection
Commission ([dataprotection.ie](https://www.dataprotection.ie/)), or
with the data protection authority of your own country.

## Changes

This notice describes how the program and the website work now. If that changes
(for example because of a new feature or a new service), the notice changes too,
with the date above; the current version can always be read in the program (Help →
About) and on mapu.hu.

The program shows the same text (Help → About).