We share data only with data processors acting on our instructions (Article 28 of the GDPR):

Vercel Inc., web hosting, Frankfurt region (EU). Hosts the platform and maintains technical access logs.
Keycloak, identity system (self-hosted in the EU). Stores account credentials, tokens and sessions.
Neon / PostgreSQL, backend database (EU). Stores profiles, favourites, reminders and feedback reports.
Resend, transactional email delivery (password recovery OTPs, confirmations). European infrastructure.
DeepL SE, machine translation of editorial content into German and English (EU). Does not process users’ personal data, only public text from the site.
Anthropic, PBC, generation of editorial content for city pages (H1 headings, FAQs and SEO descriptions) using the Claude model (US). We do not send personal data to Anthropic, only the city name and prompt templates defined by us. The transfer is carried out under the European Commission’s Standard Contractual Clauses (Art. 46 GDPR).
Upstash, Inc., a Redis database used to control abusive attempts against the login, registration and password recovery forms (rate limiting). It processes, for short periods (5–60 minutes), an identifier derived from your IP address and, where applicable, a hash of your email address, solely for the purpose of counting attempts. Servers in the EU (Frankfurt). Legal basis: Art. 6.1.f GDPR (legitimate interest in protecting user accounts).
OpenStreetMap / CartoDB, map tiles in list and detail views (EU).
Microsoft Clarity and Google Analytics 4, web analytics (US). These are only activated if you accept analytics cookies via the banner. The transfer is carried out under the EU-US Data Privacy Framework + Standard Contractual Clauses (Art. 46 GDPR).
Umami Software, Inc. (US, cloud.umami.is service), aggregated analytics with no cookies or browser fingerprint. No consent required (§ 25(2) TTDSG). Transfer under the EU-US Data Privacy Framework + Standard Contractual Clauses (Art. 46 GDPR).
Sentry (Functional Software, Inc., US), monitoring of unhandled errors and slow transactions. Receives only the error stack trace and the URL (no bodies, headers or cookies); session replays are activated only with your analytics consent and mask all text and form inputs by default. Transfer under the EU-US Data Privacy Framework + Standard Contractual Clauses (Art. 46 GDPR).
Better Stack, Inc. (US), centralised server logs and uptime monitoring. Receives only server-side events with no PII in cleartext (user identifiers are passed through an FNV-1a hash before leaving our infrastructure). Transfer under the EU-US Data Privacy Framework + Standard Contractual Clauses (Art. 46 GDPR).

We do not sell personal data or share it with advertisers outside the service. We do not currently work with any marketing or advertising providers (e.g. retargeting pixels); should we do so in the future, we would add this here and it would only be activated with your express consent.