Privacy policy

Who runs PlaceFit

PlaceFit is run by Ovi, a private individual in Ukraine, who decides how your data is used and is responsible for it (the data controller). Write to the address under Contact at the end of this page.

Without an account

You can use the rating, the place pages and every setting without signing in. We do not ask who you are, show no ads and run no analytics, advertising or third-party tracking scripts.

Your settings — weights, destinations, income, your own scores — are written into the page address and saved in your browser's local storage, together with the theme and the layout of the table. They stay on your device. Anyone you send a link to sees the settings inside it, including an income you have entered.

Cookies

The site sets no cookies until you sign in. Signing in sets two strictly necessary cookies: a short-lived one (ten minutes) that protects the sign-in from forgery, and a signed session cookie that keeps you signed in for up to 30 days or until you sign out. Neither is used for tracking, which is why the site does not ask for cookie consent.

When you sign in

You sign in with Google or Apple. From the provider we receive your account identifier, name, email address and profile picture. Apple may give us a private relay address instead of your real one. We never see your password.

With an account we also keep what you save: your settings, so that they follow you between devices; your shortlist with its places, columns, values and notes; the display name you chose; and the access tokens you created for AI agents.

Agent access

An access token lets an AI agent you connect read and edit your shortlist, and nothing else. You create and revoke tokens on your profile page. What the agent and its provider do with the data they read is governed by their own terms.

Why we use this data

We use the data only to run the site: to sign you in, to keep your settings and shortlist, and to protect the service from abuse. The legal basis is providing the service you asked for and our legitimate interest in keeping it secure. We do not sell data, share it for advertising or use it to profile you.

Technical data

Like any website, our servers receive your IP address, browser details and the addresses you open. We use them to deliver pages, to slow down repeated failed access attempts and to investigate faults. Server logs that contain them are deleted after at most 30 days.

Who else is involved

Google and Apple process the sign-in under their own privacy policies. The site runs on servers rented from OVHcloud in Frankfurt, Germany, which processes data on our behalf. We disclose data to authorities only when the law requires it.

Keeping and deleting

Account data is kept while the account exists. You can delete the account on your profile page at any time: this removes your sign-in methods, saved settings, shortlist and agent tokens at once and signs you out.

A short record of the deletion — the account number, email address and time — is kept in the service log for one year as proof that it was carried out, and is then deleted automatically. Encrypted backups of the database are replaced within about six weeks, so a deleted account disappears from them by then as well.

Applicable law

This policy is governed by the law of Ukraine. If you are in the European Union, you also have the rights the General Data Protection Regulation (GDPR) gives you.

Your rights

You can see and change your account data on your profile page and delete it there. You can also ask us for a copy of your data, to correct it or to restrict its processing, and you have the right to complain to your data protection authority.

Children

PlaceFit is not meant for children under 16, and we do not knowingly keep their accounts.

Changes

When this policy changes, we publish the new version on this page with its date.

Contact

Questions about privacy and requests about your data: support@placefit.org