Privacy Policy
Last updated: 24 June 2026
1. Who we are
Map of Croatia is run by Cartography j.d.o.o., a Croatian simple limited liability company, the data controller for your personal data. Address: Stjepana Radica 1, 49221 Bedekovcina, Croatia. Registered at Trgovacki sud u Zagrebu. We are not required to appoint a Data Protection Officer and have not done so. For any privacy question, email hello@mapofcroatia.com.
2. What we collect
We only collect what we need to sell you the map and run your account.
- Your email address, and your password if you sign up with email (stored only in hashed form by our login provider, Supabase, so we never see it). If you use Google, you do not set a password with us.
- Purchase details from Whop, our payment provider and merchant of record: your name, billing email, billing country, and the amount, currency and date. We never see or store your card number; Whop handles that.
- Automatically when you use the app: your IP address, browser and device type, and basic log data.
- If you contact us: the content of your message and our reply.
We do not collect special category data, and we do not run a newsletter or any marketing email list.
3. Why we use it, and our legal basis
- To run your account, give you the map, take payment, and email your receipt and access details: performing our contract with you (GDPR Art. 6(1)(b)).
- To keep the service secure and prevent fraud and abuse: our legitimate interest (Art. 6(1)(f)).
- To answer your support messages: contract, or our legitimate interest (Art. 6(1)(b)/(f)).
- To keep invoices and accounting records: a legal obligation under Croatian law (Art. 6(1)(c)).
4. Who we share it with
We never sell your data. We share it only with the providers that run the service for us, each under a data processing agreement: Supabase (database and login), Vercel (hosting), Mapbox (map tiles), Whop (payment, as our merchant of record), and Google (only if you choose to sign in with Google). We may also share data with our accountant and the Croatian tax authorities to meet our legal obligations, or with authorities where the law requires it.
5. Sending data outside the EU
Some providers (Whop, Vercel, Mapbox, Google) are based in the United States. Where your data goes outside the European Economic Area, it is protected by an approved safeguard, either the EU-US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.
6. How long we keep it
- Account data: for as long as your account is active. If you ask us to delete your account, we remove it apart from records we must keep by law.
- Invoices and accounting records: 11 years, as required by the Croatian Accounting Act.
- Support emails: no longer than 2 years.
- Server and security logs: no longer than 12 months.
7. Your rights
Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, send it to you or another provider, and object to use based on our legitimate interests. Where we rely on consent, you can withdraw it at any time. To use any of these, email hello@mapofcroatia.com. We reply within one month and do not charge a fee, and we may ask you to confirm your identity first. We cannot delete invoices and tax records we are legally required to keep.
8. Cookies
The app uses one essential technology: the login session set by Supabase, which keeps you signed in. It is required for your account to work, so it needs no consent. We do not use analytics or advertising cookies, and we do not track you across other websites.
9. Children
Map of Croatia is for adults. You must be at least 16 to create an account or buy access. We do not knowingly collect data from anyone younger. If you think a child has given us their data, email us and we will delete it.
10. Automated decisions
We do not make decisions about you by automated means, and we do not profile you.
11. Complaints
If you think we have mishandled your data, please email us first so we can fix it. You also have the right to complain to the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr. You may also complain to the data protection authority in your own EU country.
12. Contact
Cartography j.d.o.o., Stjepana Radica 1, 49221 Bedekovcina, Croatia. Email: hello@mapofcroatia.com.