Skip to content
Uptrip Card Market

Privacy Policy

Last updated: 30.10.2026

This Privacy Policy explains how information is collected, used, and protected when you visit this website (the “Site”).

1. Information We Collect

Visitors do not need an account, and this website does not collect personal information from them through forms. The data collected automatically consists of standard server log files generated by the web server (NGINX), the cookies and the local storage entry described in section 6, the map tile requests described in section 8 and, only if you consent, the usage data for Google Analytics described in section 7.

The server log files may include:

  • IP address
  • Date and time of the request
  • Requested URL or resource
  • HTTP method and response status code
  • Referring URL (if provided by the browser)
  • User agent (browser and operating system information)

2. Purpose of Data Collection

Server log data is used solely for the following purposes:

  • Ensuring the security and stability of the website
  • Diagnosing technical issues and errors
  • Monitoring server performance and traffic patterns
  • Detecting and preventing abuse or malicious activity

Server log data is not used for marketing, profiling, or tracking individual users. Only if you consent do we use Google Analytics to create anonymous usage statistics that help us improve the website (section 7).

3. Legal Basis for Processing (GDPR)

Where applicable, server log data is processed based on our legitimate interest in operating and securing the website in accordance with Article 6(1)(f) of the General Data Protection Regulation (GDPR).

Google Analytics is used only on the basis of your consent (Article 6(1)(a) GDPR and, for storing and reading cookies on your device, Section 25(1) of the German Telecommunications Digital Services Data Protection Act, TDDDG). The other cookies and the local storage entry listed in section 6 are strictly necessary to provide the functions you request (Section 25(2) No. 2 TDDDG) and do not require consent.

4. Data Retention

Server log files are retained only for as long as necessary to fulfill the purposes described above. Log data is periodically rotated and deleted in accordance with our internal retention policies.

How long Google Analytics data and cookies are kept is described in section 7; your choice in the cookie banner is stored for 12 months (section 6).

5. Data Sharing

We do not sell, rent, or share server log data with third parties, except where required by law or to comply with a valid legal request from a public authority.

If you consent to Google Analytics, the usage data is processed by Google as our processor and may be transferred to the USA (section 7). When you open the map page, your browser loads map tiles from OpenStreetMap (section 8).

6. Cookies and Similar Technologies

This website uses the following cookies and one entry in your browser’s local storage:

  • lang: a functional preference cookie that stores the language you chose with the language switcher. It is set only when you click the language switcher, it is kept for 1 year, and it is used only to send you to your language when you open the start page.
  • jwt and jwt_token: used only for the login session of the site administrator (8 hours). They are not set for visitors.
  • uptrip_consent (local storage, not a cookie): stores whether you accepted or rejected Google Analytics, together with the date of your choice. It is strictly necessary to respect your choice (Section 25(2) No. 2 TDDDG), is never sent to our server, and is kept for 12 months; after that, or when the banner changes, we ask again.
  • _ga and _ga_4FSXZRGMM9: Google Analytics cookies that distinguish visitors by a random identifier and store the state of the current visit. They are set only after you click “Accept” in the cookie banner and are kept for up to 2 years, unless you delete them or withdraw your consent (section 7).

Without your consent, no Google script is loaded and no Google Analytics cookie is set. This website uses no advertising pixels. Fonts, icons, and map markers are served from this website itself, not from third-party servers.

7. Google Analytics

If you click “Accept” in the cookie banner, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

We use Google Analytics to understand how the website is used, for example which pages are visited and how visitors find them, and to improve it on that basis. We only see aggregated statistics, not individual visitors, and we do not use Google Analytics for advertising.

The following data is processed:

  • pseudonymous online identifiers (the random IDs in the cookies _ga and _ga_4FSXZRGMM9)
  • your IP address, which is used only briefly to derive an approximate location; according to Google, Google Analytics 4 does not log or store IP addresses
  • device and browser information (device type, operating system, browser, screen resolution, language)
  • the pages you visit (address without query parameters, page title), the time and duration of your visit, and the referring website
  • your approximate location (country, region, city), derived from the IP address

Legal basis: your consent under Article 6(1)(a) GDPR and, for storing and reading the cookies on your device, Section 25(1) TDDDG.

Google processes the data on our behalf as a processor. We have concluded a data processing agreement with Google (Google Ads Data Processing Terms).

Google may transfer data to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and process it there. This transfer is covered by the European Commission’s adequacy decision for the EU-US Data Privacy Framework (Article 45 GDPR), under which Google LLC is certified. In addition, Google has agreed to the EU Standard Contractual Clauses.

We have set Google Analytics to delete event data after 2 months. Google signals and the use of the data for ad personalisation are disabled, and we use no advertising features.

You can withdraw your consent at any time with effect for the future: click “Cookie settings” at the bottom of any page and choose “Reject”. Measurement then stops and the Google Analytics cookies are deleted on this website. The withdrawal does not affect the lawfulness of the processing carried out before it.

Further information: Google Privacy Policy and Google Ads Data Processing Terms.

8. Map Tiles (OpenStreetMap)

The map page shows a map whose tiles are loaded from the servers of OpenStreetMap (tile.openstreetmap.org), operated by the OpenStreetMap Foundation. When you open the map page, your browser requests these tiles directly from the OpenStreetMap servers. This transmits your IP address, together with technical data such as your browser type and the requested map area, to a third party. We have no influence on this processing. Further information is available in the privacy policy of the OpenStreetMap Foundation.

9. Data Security

Appropriate technical and organizational measures are implemented to protect server log data against unauthorized access, alteration, disclosure, or destruction.

10. Your Rights

Under the GDPR you have the following rights regarding your personal data:

  • Right of access (Article 15 GDPR)
  • Right to rectification (Article 16 GDPR)
  • Right to erasure (Article 17 GDPR)
  • Right to restriction of processing (Article 18 GDPR)
  • Right to data portability (Article 20 GDPR)
  • Right to object to processing based on legitimate interests (Article 21 GDPR)
  • Right to withdraw a consent at any time with effect for the future (Article 7(3) GDPR); for Google Analytics via “Cookie settings” at the bottom of the page
  • Right to lodge a complaint with a data protection supervisory authority, in particular in the EU Member State of your habitual residence, your place of work or the place of the alleged infringement (Article 77 GDPR)

To exercise your rights, use the contact details in the Imprint. Some requests can only be answered to a limited extent where log data or pseudonymous analytics data cannot reasonably be linked to you.

11. Third-Party Links

This website may contain links to external websites. We are not responsible for the privacy practices or content of those third-party sites.

12. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time. Any changes will be posted on this page with an updated revision date.