Privacy Policy

Who we are

Riparia is the data controller for riparia.live. Contact: privacy@riparia.live.

What we collect

Address queries — coordinates are sent server-side to OpenStreetMap Nominatim to retrieve a postal address. Cached for 1 hour. Never linked to your identity.

Payment data — handled entirely by Paddle. We receive only a transaction ID and status.

Cookies — see Cookie Policy. No tracking or advertising cookies.

Server logs — standard IP and request logs, retained 30 days for security.

Legal basis

Contract performance (Art. 6(1)(b) GDPR) for analysis delivery · Legitimate interests (Art. 6(1)(f) GDPR) for security logging · Legal obligation (Art. 6(1)(c) GDPR) for transaction records (10 years under Romanian Law 82/1991).

Third parties

OpenStreetMap Nominatim — reverse geocoding (osmfoundation.org/wiki/Privacy_Policy). CARTO — map tile delivery (carto.com/privacy). Paddle — payment processing as Merchant of Record (paddle.com/legal/privacy).

Your rights

Under GDPR you may access, correct, delete, or export your data, and object to processing. Email privacy@riparia.live — we respond within 30 days. You may also lodge a complaint with ANSPDCP or your national data protection authority.