Privacy notice

Controller: Josef Süß, Raphaelweg 5, 85625 Baiern, Germany, hallo@wtfair.wtf.

Hosting and access

Cloudflare delivers the static site and runs the Worker. Access produces logs and IP addresses at Cloudflare. The IP address is also used to limit reports and checkout attempts to ten per minute each.

“I was here”

With your consent, from age 16, you can sign in through X using OAuth 2.0. We read your own X identifier, @handle, name and profile picture. We store the identifier, @handle, name, a copy of the picture in our EU R2 bucket, your place and time, the report count and a hidden flag in our EU D1 database. Other visitors see the name, @handle and picture of visible figures. Your X access is revoked immediately after sign-in.

Your entry remains until you delete it through the same dialog and X sign-in. Reports count toward moderation; moderators can hide an entry. The planned weekly check for deleted or suspended X accounts is currently disabled. During sign-in, the signed HttpOnly cookie wf_x holds the login state for at most ten minutes.

Visitor measurement

PostHog uses EU servers without cookies or browser storage and calculates a daily hash on its servers, without person profiles. We send page views without the part after #, clicks by element without text or link destination, and our own interaction events. The measurement module runs only in builds with a PostHog project key and does not send from localhost or 127.0.0.1.

Cloudflare Web Analytics also measures visits and loading times with a script from Cloudflare that reports to this domain. It records the page path, referring site, browser, operating system, device type, country, navigation type (such as a reload) and performance values such as Core Web Vitals, without cookies, browser storage or fingerprinting. Cloudflare receives the IP address with each report but discards it at the data centre and does not store it in its databases or logs.

Test purchases

Stripe Checkout currently runs only in test mode. D1 stores the plot, brand, colour, amount, currency, Checkout session and payment identifier; it stores no card data. D1 also stores the content set up for a plot (links, coupons and video links) and its review state. After approval, the meadow publicly shows the plot’s brand name, colour and approved content. A later change stays private until it is approved again; the approved version stays visible in the meantime. Once an order is refunded or expired, its brand and content are no longer shown. Stripe collects the email address, payment details, billing address, company name and optionally a VAT ID during Checkout.

Storage on your device

Local storage remembers your language choice (webfest-lang), your guest identifier for sharing (webfest:gast) and up to 200 guest identifiers you already reported (webfest:gemeldet). It also keeps your meadow design (webfest:platz) and your own plots with their Checkout session (one entry per plot, webfest:gekauft: followed by the plot; older entries in the list webfest:gekauft). Until a later visit finds a payment settled and its plot stored, it also keeps the Checkout session you came back from Stripe with (webfest:kauf: followed by the session). The session authorises reading and editing the content of your currently owned paid plot.

External links and map data

Your rights and open review

You can request access, correction, deletion, restriction or portability, object to processing where applicable, withdraw consent for the guest entry, and complain to a data protection supervisory authority. Contact hallo@wtfair.wtf for requests. The legal bases and retention periods for access logs, measurement data and orders still need professional review before publication.