Privacy

Last updated: 14 October 2026.

Not a So Boring Walk (NSBW) is a free, non-commercial service: no advertising, no selling or sharing of data, no audience tracking, no cookies.

Data controller

the operator of this site, who can be reached at the address given by the operator.

Without an account

Everything you save (segment rules and comments, counters, favourites, completed walks, options) stays in your browser: nothing is sent to the NSBW server. The server only receives address searches (the text searched for, or the position of a point whose address is wanted), which are not kept: its technical log records neither the text nor the positions.

To display the map and prepare routes, your browser also contacts public services directly, which receive your IP address and the area being viewed: OpenFreeMap (base map outside Belgium), the Service public de Wallonie (aerial photo), Amazon Web Services (3D terrain), Nominatim (fallback address search) and Overpass (paths outside the stored maps). They are described on the Credits and licences page.

With an account

The account is used only to sign you in and to make your data available on all your devices (performance of the service you request, Article 6(1)(b) GDPR). Data processed:

Email address	to receive the sign-in code; never shown to other users
Display name	optional
Synced data	completed walks (with their track and starting address), favourite starts and routes, sceneries, segment rules, comments and counters, route options (including the last start)
Sessions	fingerprint of the sign-in token (the token itself is not kept), dates, browser type
Dates	account creation, last visit
IP address	held in memory only, for 60 minutes at most, to limit abuse (number of code requests); the server’s technical log does not record it

Recipients

Brevo (processor): sends the sign-in codes and account-related messages; receives your email address.
Server hosting: (processor).
Cloudflare Turnstile (processor): anti-bot check on the sign-in form, which analyses your browser.

Your data is not visible to any other user. An administrator can see the list of accounts (address, name, dates, amount of data), but not their content.

Retention periods

Sign-in code: 60 minutes.
Session: 60 days after last use, then deleted.
Account and data: for as long as you use them. After two years without signing in, the account is deleted, following a notice email sent one month beforehand.
Registration request for an address from a domain not yet accepted: three months at most.
Address blocked by an administrator (abuse): for as long as the block lasts.

Your rights

Erasure: “Account” tile, “Delete my account” — the account and all its data are erased from the server immediately.
Portability and access: “Preferences” tile, “Export” (a JSON file of your data); for anything else, write to the controller.
Rectification, objection, restriction: from within the app or by writing to the controller.
Complaints: to the Data Protection Authority (Belgium) or the authority in your country.

Storage in the browser

NSBW uses no cookies. It keeps your data and settings in your browser’s local storage (localStorage, IndexedDB, offline map cache), which it needs in order to work; “Sign out” removes the copy of the account data from the device.