Privacy

franzbroetchen.net is a small site for sharing Franzbrötchen. This page describes everything it stores about you. There is no analytics, no advertising, and no third-party tracking.

Account data

When you create an account, the following is stored:

• Email address — used to identify your account and to sign in.
• Display name — shown publicly next to every post you make.
• Profile picture URL — only if you sign in with Google, and only the link Google provides. The image itself is not copied.
• Password hash — only if you sign up with email and password. The password itself is never stored.
• Account creation date.

Your email address is never shown publicly and is never sold, shared or sent to a third party.

Sessions

Signing in sets a session cookie so the site remembers you. It holds a random session token, not your details, and expires after 30 days. It exists to keep you signed in, not to track you across sites. Signing out deletes the session.

Posts

Everything you post is public: the location name, its coordinates, your rating, your note, your photo, your display name, and the date. Anyone can read it without an account. Deleting a post removes the record and its stored images.

Photos and EXIF data

Uploaded photos are re-encoded on the server before they are stored. The image is decoded to raw pixels and written back out as a new WebP file, which means all embedded metadata is discarded — including EXIF camera information and any GPS coordinates your phone recorded. Only the pixels survive. The original file is never written to storage.

The coordinates attached to a post are the ones you chose in the form, not anything read from your photo.

Google sign-in

If you choose "Continue with Google", Google sends this site your email address, your name, your profile picture URL, and a Google account identifier used to recognise you on your next sign-in. Nothing else is requested, and no other Google service is accessed. Your Google password is never seen by this site.

You can revoke this site's access at any time from yourGoogle account permissions page. Doing so stops future Google sign-ins but does not delete the account here.

Where data is stored

Account records and posts are held in a Cloudflare D1 database; photos are held in Cloudflare R2. Cloudflare processes this data as the hosting provider.

Deleting your data

You can delete any of your own posts from your account page, which removes the post and its photos.

The same page also deletes your whole account. That permanently removes:

• your account, including email address, name, profile picture URL and password hash,
• every post you have made, with its location, rating, note and tags,
• every photo you have uploaded,
• your sessions, and the link to Google if you have one.

Deletion happens immediately and cannot be undone. There is no recovery and no trash. To confirm you have to type a word and, if your account has a password, enter that password. You are signed out automatically afterwards.

There are no backups from which deleted posts could return. What other people have already seen, or saved elsewhere, is of course beyond recall.

If something goes wrong, or you have a question about your data, email the address in theterms.