Privacy Policy
Last updated: April 25, 2026
1. Data Controller
The data controller is SURRA, which manages SURRA Maps and the website surramaps.org. For privacy-related requests you can write to support@surramaps.org.
2. Service principles
SURRA Maps can be used without a mandatory account. At launch, active analytics are only first-party and owned by SURRA: we do not use advertising SDKs, we do not perform cross-app or cross-site tracking, we do not use IDFA, we do not require ATT and we do not collect demographic data at launch.
3. Location permissions and location use
The app may request location permission when you use features that depend on your current position. In particular, device location is read to show where you are on the map and to sort places by distance. This use is functional to the app experience, is not used for advertising or cross-app tracking, and is not sent as a field in our proprietary analytics events.
4. Usage data collected
We record app open, legend open, category selection, place or detail view open, external click to Google Maps and session end with duration. These events are associated with a locally generated anonymous or pseudonymous identifier, session id, platform, app version, language, country, layer id, feature id, link type and session duration. We do not collect mandatory accounts, advertising data or demographic profiles.
5. Analytics purposes
We use this data to measure real product usage, understand which categories and places are most consulted, monitor sessions and average session duration, improve content and usability, and power the internal KPI dashboard in the admin area. We do not use this data for advertising, remarketing or commercial profiling.
6. Legal basis
Processing of device location, when required to use related features, is based on the consent or authorization granted through the operating system. Processing of analytics usage data is based on the controller's legitimate interest in measuring and improving the service, in accordance with data minimization and proportionality principles.
7. Data sharing
We do not sell personal data and we do not share these analytics with advertising networks or third parties for marketing purposes. Data may be processed only by technical providers strictly necessary for operating the service, such as hosting and infrastructure providers, under the controller's instructions and appropriate confidentiality measures.
8. Data retention
Device location is used only for the technical time needed to provide the function requested by the user. Analytics usage data is retained for a limited and proportionate period for product analysis purposes, with periodic reviews of its necessity. When no longer needed, it is deleted or made no longer attributable to the local identifier.
9. Your rights and withdrawal options
You can ask us for access, restriction, objection or deletion within the limits applicable to the anonymous or pseudonymous nature of the analytics collected. For privacy requests, write to support@surramaps.org. To stop new analytics submissions you can also uninstall the app: the local file storing the anonymous identifier is removed from the device and a new installation generates a new identifier. Location permissions can also be revoked at any time from the device settings.
10. Security
We adopt appropriate technical and organizational measures to protect data against unauthorized access, loss or disclosure, including encrypted transport, access controls and restricted handling by authorized subjects.
11. Website, cookies and contacts
The public website does not use advertising profiling tools and does not perform cross-site tracking. Any cookies or technical technologies used on the site are limited to essential operation. For details, see the Cookies page. For any doubt or privacy request, contact us at support@surramaps.org.
12. Policy updates
We may update this policy when the product, its features or the processing methods change. The latest version is always published on this page.