Legal

Privacy & cookies

Last updated 6 July 2026 · Applies to leximap — the EU navigator prototype.

The short version

LexiMap works without an account, without ads and without cross-site tracking. If you create an account, we store your email and your saved searches so you can reread your answers. One optional, anonymous measurement — which questions get asked — is off until you opt in.

What we process, and why

  • Account (optional). Email address and password hash, stored with Supabase in the EU (Frankfurt). Legal basis: performance of a contract — you asked for an account.
  • Saved searches (optional). The questions you ask while signed in, and their answers, so you can reread them. Stored per-user, protected by row-level security. Legal basis: performance of a contract.
  • AI questions. When you ask the assistant a question, its text (plus the optional context you set: destination, citizenship, situation) is processed to produce the answer. Questions are not used to train models. Legal basis: performance of the service you requested.
  • Anonymous analytics (opt-in). A log of question texts — with no account link and no identifiers — to improve coverage and answer quality. Off by default; controlled by the consent banner. Legal basis: consent (art. 6(1)(a) GDPR), withdrawable any time from “Cookie preferences” in the footer.
  • Contact form. Name, email and message, delivered via Formspree, only to answer you. Legal basis: consent, given with the tick on the form.

What stays on your device

Your theme choice, your consent choice and the context you set under the search bar (destination, citizenship, situation) live in your browser's local storage — they never reach a server unless you ask a question that uses them. No advertising or third-party tracking cookies exist on this site.

Who we share data with

  • Supabase — account and saved searches, hosted in the EU (Frankfurt).
  • OpenAI — the text of AI questions, as processor, to generate answers.
  • Formspree — contact form delivery.

We never sell data. There is no advertising.

Your rights

Under the GDPR you can ask for access, correction, deletion, portability, and restriction of or objection to processing; where processing rests on consent you can withdraw it at any time. Write to us via the contact page and we'll answer within 30 days. You can also lodge a complaint with your local supervisory authority.

Deleting your account removes your email and saved searches; anonymous question logs contain nothing that can be traced back to you.

Cookie preferences

You can change your consent at any time from Cookie preferences in the footer — it reopens the same banner you saw on first visit.