Privacy

QuickToilet is run by Stijn Soetaert, Belgium — a private individual, not a company — and that person is the controller of your data. Write to [email protected].

Why we may process it. Keeping the map free of spam and one-browser-one-vote is our legitimate interest, and yours. Running your account, syncing your settings and sending a reset email is needed to provide the service you asked for. Publishing your comments, photos and added spots under your name happens because you chose to post them. Nothing is used for profiling, advertising or sale.

Contributions without an account — votes, reports, cleanliness ratings and answers to the “help us” questions — are stored with the random id from the qt_dev cookie and a keyed hash of your IP address. Both exist to stop one browser from voting twice and to block abuse; neither can be turned back into you. The vote stays as long as the spot it belongs to; the IP hash is wiped after 90 days by a nightly job. Signed-in votes carry the same device id and IP hash.

With an account we keep your email, your name, and one of: a hashed password, the id Google gives us, or the id Apple gives us. Sign in with Google shares your email, name and a link to your profile picture with us; we keep that link only to show the picture in your own account, never download it, and remove it when you delete the account. Your needs, units, theme, map style and saved spots are copied to the account so they follow you to other devices. Comments, photos and the spots you add are linked to the account and shown publicly with your name, and also carry the device id of the browser they were posted from.

Password-reset links are stored as one-time tokens and deleted 7 days after they were used or expired.

Your position is never written to our database. The map sends the area on screen; the sponsored slot sends your position once, rounded to about 100 m. Our server keeps no per-request access log in production; container logs are rotated (three files of 10 MB) and not analysed.

Needs, units, theme, map style and saved spots live in your browser or in the app on your phone. They reach us only if you sign in, so they can follow you to your other devices; signing out leaves the copy on this device alone.

Photos you upload are re-encoded on our server before anything is saved: the image becomes a fresh JPEG of at most 2048 px on the longest side, and every embedded tag — camera model, time, and the GPS position phones write into pictures — is dropped. Uploads over 10 MB are refused. You can delete your own photo from the spot it belongs to; an admin can delete any.

Comments show your account name and nothing else — the API never exposes your account id, email or device id to other users. Anyone can report a comment or a photo from the spot page; reports land in our moderation queue, and an admin can hide every contribution of an account or device that abuses the service in one go.

Nobody buys or receives your data from us. These services process data on our behalf, or are contacted by your browser because the product needs them:

Toilet locations come from OpenStreetMap and open-data portals — see Data sources. Your votes are shown as totals; your comments and added spots carry your account name.

Sponsors never see you. Sponsored slots are switched off at the moment; when they are on, they are picked by our own server, by distance from the map area, from a list of venues that pay us. We count how often a placement was shown and tapped — a number per placement, never per person. There is no advertising pixel, no third-party script, and no ad cookie. Supporters who go ad-free see no slots at all; that status is checked with the same qt_dev id.

You have the right to access what we hold about you, to have it corrected, erased or its use restricted, to object to processing based on our legitimate interest, and to receive the data you gave us in a portable form. For contributions made without an account, tell us the spot and roughly when; for an account, write from its email address.

Write to [email protected]. A person answers within a month — the legal deadline — and usually much sooner. If that does not settle it, you can complain to the Belgian Data Protection Authority at gegevensbeschermingsautoriteit.be.

Deleting your account is a button in Settings. When you delete your account, your name, email, password and sign-in ids are removed immediately. Your photos, comments and added spots stay, shown without a name, linked by an internal id we keep only so we can remove all contributions of an account that abused the service. If you also want those contributions gone, write to [email protected] from the address the account used and we remove them by hand. The same steps are written out at quick-toilet.com/account/delete.

Age. QuickToilet is for people aged 16 and over. We do not knowingly keep data of children under 13; if you think a child has created an account, write to us and we remove it.

If something goes wrong. If a data breach affects you, we email you at the address on your account and say what happened and what we did about it.