Tourello

Privacy

This is a translation for information only; only the German version is legally binding. Deutsche Fassung

This policy applies to the website tourello.org and to the “Tourello” apps for Android, iPhone/iPad and Mac. The German version is binding.

Controller

The operator named in the imprint on tourello.org. Contact: info [at] tourello.org

In brief

  • No account, no advertising, no cookies, no third-party analytics or tracking services – neither in the apps nor on the website. We evaluate how the website is visited ourselves, from the server logs (see 2.).
  • Your location and your tours stay with you: on the device and in the storage you choose yourself. The provider does not receive them.
  • For the licence and map downloads, the app talks to tourello.org. For this, a pseudonymous device ID and technical connection data are processed.
  • Third-party services (aerial imagery, marked routes, lift status, language model) are only used when you use the respective function.

1. The apps

Location

The app uses your device’s location to show your position on the map, to record tours and to navigate. During a recording or navigation also in the background – only while it is running. The location is processed on the device and not transmitted to the provider. The app saves recorded tours on the device and, if you upload them, in your storage.

Your storage

You keep tours, points, tour descriptions and pace profiles in a storage of your choice: your own server (WebDAV), Dropbox, Google Drive or only on the device. The access credentials remain encrypted or in your device’s protected storage. The data goes directly from the device to your storage; the provider has no access to it. The storage is subject to the terms of its operator.

Dropbox and Google Drive: If you choose one of these services, you sign in with the service itself and allow the app to access a folder of its own – on Dropbox only the app folder “Apps/Tourello”, on Google Drive only files the app has created itself (folder “Tourello” in “My Drive”, permission drive.file); the app cannot see the rest of your storage. The app only reads and writes your tours, points and settings files there, to keep them in step across your devices. The access tokens stay on your device; the provider of Tourello receives neither them nor your files. Dropbox (Dropbox, Inc.) and Google (Google LLC) also process the data in the USA; their privacy policies apply. Tourello’s use and transfer of information received from Google APIs adheres to the [Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements; this data is not used for advertising, not sold and not shared with third parties. You can sign out at any time in the app (Settings → Storage) and revoke access in your Dropbox or Google account.

Licence (tourello.org)

For the licence, trial, beta and the one region without a licence, the app contacts tourello.org only when necessary: when redeeming a code, when starting a trial or beta, when downloading the region without a licence, when your licence expires and when you choose “Check licence” – not regularly in the background. The following is processed:

  • a pseudonymous device ID: a hash formed from a device-bound identifier (Android: this app’s Android ID; iPhone/iPad: a random identifier in the keychain; Mac: hardware identifier). The identifier itself never leaves the device, and it does not allow conclusions about your name;
  • the platform (Android, iOS, Mac), the app version, the licence token, any code you entered and the region chosen without a licence;
  • your IP address and the time (see server logs).

Only the following is stored on tourello.org, per device ID: which licence it belongs to and when it last checked in, with platform and app version (for the device limit; deleted 90 days after the licence ends, or earlier if the provider releases the slot, for example after a change of device); when it started a trial or beta (so that a reinstallation does not yield a new one); which region it received without a licence. From this the provider counts anonymously how many devices and app versions use a licence. No names, e-mail addresses, locations or payment data. Purpose: performance of the terms of use and protection against misuse of licences (Art. 6(1)(b) and (f) GDPR).

If your storage contains a licence from one of your other devices (file licence.json), the app takes it over from there; this file is only written and read by your app in your storage.

Subscriptions

If Tourello later becomes subject to a charge: purchases and subscriptions are handled via the App Store (Apple) or Google Play. The provider does not receive any payment data. To verify a subscription, the app transmits the store’s purchase receipt to tourello.org, and tourello.org asks the store whether the subscription exists. The privacy notices of Apple or Google also apply.

Downloading maps

The app downloads regions (maps, elevations, routing data) from tourello.org. This produces the usual connection data (see server logs). Which regions you download is not analysed. Likewise, the app fetches a marked route from tourello.org when you tap it.

Third-party services, only when used

  • Aerial imagery: If you switch on aerial imagery, the app loads image tiles directly from the national surveys (e.g. Bavarian Surveying Administration, Land Tirol, Autonomous Province of Bolzano – South Tyrol, swisstopo, IGN France, basemap.at) and, if you enter your own key, from MapTiler. They receive your IP address and the map section you are viewing. How long they keep this information is up to each service; the Flemish administration (Digitaal Vlaanderen), for example, logs IP address and user agent for 90 days.
  • Lift status: If you fetch the lift status, the app asks the Open Data Hub South Tyrol; it receives your IP address.
  • Text suggestions: Only if you set up a provider (Mistral, DeepSeek, OpenAI, Anthropic or your own service) and request a suggestion does the app send the data of the tour concerned (e.g. distance, elevation gain, places, way types) with your own key to this provider. No provider is set up by default. Mistral processes in the EU (France); with DeepSeek (China), OpenAI and Anthropic (USA) it means a transfer to a country outside the EU – the app says so when you choose the provider. The terms of the chosen provider apply.

On the Mac: geotagging photos

When geotagging photos, the Mac app reads and writes the location data in your image files. This happens only on your computer.

Stored on the device

Settings, downloaded maps, recently searched places, the licence token and caches (e.g. aerial imagery tiles, at most 30 days) are kept only on your device. They are deleted together with the app.

2. The website

  • No cookies, no advertising, no third-party analytics services.
  • Visitor statistics from the server logs: from the logs (see 3.) we evaluate how the website is used – number of visits, pages viewed, referring pages, browser and device type, and the approximate country of origin derived from the IP address. This happens on our own server; the results are aggregated figures without IP addresses and do not allow conclusions about individual visitors. Purpose: improving the website and measuring its reach (Art. 6(1)(f) GDPR). You can object to this at any time (info [at] tourello.org).
  • No third-party servers: fonts, images, videos and scripts come exclusively from tourello.org.
  • The choice between light and dark display is stored in your browser’s storage – only if you switch it – and never transmitted.

3. Server logs

Each time tourello.org is accessed – by the website or the apps – the server processes technically necessary data: IP address, date and time, requested address, status code, amount of data transferred, referrer and program identifier. This serves secure operation, the defence against attacks and – for visits to the website – the visitor statistics (see 2.) (Art. 6(1)(f) GDPR). Requests from the apps (licence, maps) are not included in the statistics. The logs are deleted automatically after 90 days. We need them for that long to detect and investigate abuse of the trial licences and attacks spread over longer periods – both often only become apparent after weeks; repeated attack attempts lead to a temporary block of the IP address.

4. Contact by e-mail

If you write to us, we use your details only to answer your enquiry (Art. 6(1)(b) or (f) GDPR) and delete them as soon as they are no longer needed for that purpose.

5. Hosting

tourello.org runs on a dedicated server of STRATO AG, Berlin, in Germany.

6. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a data protection supervisory authority. Because the provider does not store any names, please state the device ID that the app shows under Settings → Licence when making enquiries about your licence.

If you ask for erasure, we remove all data held for that device ID (licence slot, last check-in, platform, app version, region without a licence). Only the note that it has started a trial or beta is kept, for as long as that is needed to prevent misuse of trial licences (Art. 17(3) and Art. 6(1)(f) GDPR). Server logs are deleted after 90 days in any case.

As of: 10 November 2026