Skip to content
FuelWorld

Privacy policy

Last updated: 28 October 2026

Data controller

In short

FuelWorld has no user accounts or registration, uses no analytics or advertising tools and builds no profiles. The database only contains public data about petrol stations and prices (and technical data about how they are downloaded): it contains no user data.

What data we process and why

1. Technical connection data

When you visit the website, your browser sends our server technical data such as your IP address, browser type, the address of the requested page and the date and time. Your IP address is needed to send you the response. Keeping that data in technical logs as well is a separate processing operation, explained below.

  • Purpose: to show the website, keep it secure and prevent abuse.
  • Legal basis: legitimate interest (Article 6(1)(f) GDPR) in providing the service you request when you visit the website and in protecting it against abuse and attacks.
  • Our code keeps the IP only in memory to limit the number of requests to the API, in windows of approximately one minute. It then discards it at the next memory sweep or when the server instance shuts down. It is not stored in any database.
  • When a request to the API fails, our code writes the name, code and technical message of the error to the server logs. We do not intentionally log your IP or other identifiers, but we cannot guarantee that a technical message will never contain some data from the request.

The hosting platform (Vercel) keeps its own logs. According to what Vercel has told us for the Hobby plan, which is the one we use, there are three types, each with its own period, which is set by the provider and not by FuelWorld. These periods refer only to each type of log, not to all the data Vercel may process, and they are the ones stated by the provider, not a guarantee from FuelWorld:

  • Edge logs of its delivery network (CDN): they include your IP address, user agent (your browser details), the time and the requested path. They are kept for up to 24 hours on the Hobby plan, according to the provider's latest reply.
  • Firewall and security logs: they may include your IP address. They are kept for up to 24 hours on the Hobby plan, according to the provider's latest reply.
  • Runtime logs, with the requests that reach the website's server, including the page address, and those error messages: according to Vercel, they are kept for 1 hour on the Hobby plan.

The address of each request to our API includes its parameters, which may appear in those Vercel logs during those periods. They include the approximate coordinates, rounded to 3 decimal places, that are sent when you use “Near me” or search by area: the latitude and longitude of the search point in the nearby stations search and, when the map is queried or you use “Search this area”, the limits of the visible area and, if you have used your location, your rounded position (see sections 2 and 3).

2. Your location (only with your permission in the browser)

Your location is only used if you ask for it and allow it in your browser. It is only read when you press “Near me” or a location button, on each visit. It is not read when the website opens, even if you had already given permission, and if you have not given it, it is not requested. Each time it is read once, with no continuous tracking.

  • The browser provides your exact position. That exact position is only used in your browser, to centre the map and show your point; what leaves your browser is an approximate position (rounded to about 100 metres) and the map area being shown, as explained below.
  • Before leaving your browser, the coordinates are rounded to 3 decimal places (about 100 metres) and sent to our server to find nearby stations. They do not appear in the page address or in the data the website stores in your browser (see the cookie policy).
  • Those rounded coordinates travel as parameters in the address of the request to our API, so they may appear in Vercel's logs during the periods given in section 1.
  • When the map is centred on your area, your browser downloads the map images for that area from OpenFreeMap (see “Service providers and data disclosures”).
  • They are not stored in our database.
  • Purpose: to show you nearby stations.
  • Legal basis: your consent (Article 6(1)(a) GDPR), which you give each time you expressly turn on the feature: pressing “Near me” or a location button and granting permission in your browser. The website does not remember this choice from one visit to the next. You can withdraw the permission at any time in your browser settings. Withdrawing it does not affect searches already made.

3. Searches and map area

When you type a city or postcode, the text is sent to our server to suggest areas. When you move the map or press “Search this area”, the limits of the visible area are sent, rounded in the same way. They are only used to answer your search and are not stored in our database. As with any request, the requested address (which includes that text or that rounded area) remains in the hosting platform's logs (see section 1) and, for a limited time, in its cache: at most 1 hour for place suggestions and 6 minutes for station searches and the map area.

  • Purpose: to answer the search you request.
  • Legal basis: legitimate interest (Article 6(1)(f) GDPR) in providing the search service you request.

4. Emails you send us

If you write to contacto@fuelworld.app, we process your email address, your name if you give it and the content of the message. The email is received and stored in the contact mailbox, on DonDominio's email service.

  • Purpose: to reply and handle your requests, including the exercise of your rights.
  • Legal basis, depending on the purpose: to handle your enquiry, our legitimate interest in replying to people who write to us (Article 6(1)(f) GDPR); to handle requests to exercise your rights, compliance with a legal obligation (Article 6(1)(c) GDPR, in connection with its Articles 12 to 22); and, once the enquiry has been handled, our legitimate interest in keeping what is necessary to defend ourselves against possible claims (Article 6(1)(f)).
  • Retention: we keep contact enquiries for 12 months from the last relevant interaction, unless there is a specific legal reason to keep them longer (for example, a legal obligation or a claim). This period is set by FuelWorld, not by the provider. There is no automatic deletion: every three months we manually review the contact mailbox and delete enquiries that have exceeded that period, so a message may remain in the mailbox until the next review.
  • Email service: it is provided by Soluciones Corporativas IP, S.L. (DonDominio). According to the provider, its servers, its backups and its support are in Spain, and no international data transfers take place. DonDominio makes rotating backups of email accounts, with a 24-hour window, as it has informed us. When the mailbox is closed, the provider states that the messages are deleted immediately. Its technical logs are kept for as long as the law requires.

5. Data stored in your browser

Some preferences (the colour theme you choose and the hints you close) are stored only in your browser and are not sent to our server. They are explained in the Cookie and local storage policy.

Service providers and data disclosures

FuelWorld does not sell your personal data. To provide the service, certain technology providers may receive technical data needed for the website to work, such as your IP address, browser information or the requests made. They include Vercel, which provides the hosting service, and OpenFreeMap, whose resources make it possible to display the map. Each provider processes the data in accordance with the terms applicable to its services. We may also disclose data where there is a legal obligation. To work, the website relies on these providers:

  • Website hosting: Vercel. It receives your browser's requests and runs the website's server, whose functions run in London (United Kingdom), the region configured for FuelWorld. Content is served from its worldwide network, from the point closest to you, and the logs of its delivery network (CDN) and its firewall may be outside that region. Vercel Inc. provides FuelWorld's hosting service under its Terms of Service and its Privacy Notice. In providing the service, Vercel may process technical data and activity logs, including data relating to the requests received, in accordance with the terms applicable to the account.
  • Database provider: Supabase (Supabase Pte. Ltd.), with the database hosted in its London region (United Kingdom), where, according to its data processing agreement, it mainly stores and processes the data. It only stores public data about petrol stations and prices; it stores no user data.
  • Contact email: DonDominio (Soluciones Corporativas IP, S.L.), which provides the email service where messages sent to the contact address are received and stored. According to the provider's information, its servers, its backups and its support are in Spain.
  • Domain: DonDominio, where the domain is registered and which provides its DNS servers.
  • GitHub Actions is used to download the Ministry's public prices and to make a weekly backup of the database, which only contains that public data; it does not process user data.
  • UptimeRobot periodically checks that the website responds; it does not process data about visitors.

In addition, when the map loads your browser connects directly to OpenFreeMap (tiles.openfreemap.org) and sends it the technical information needed for any web request, including your IP address and the requested map area. OpenFreeMap is not a processor for FuelWorld: it is operated by Hyperknot Software Kft., which processes that data as a controller under its own privacy policy. According to OpenFreeMap, the service uses Cloudflare as a content delivery network (CDN), which may receive your IP, the requested URL, user agent, time and data from setting up the encrypted (TLS) connection. More details in the Cookie and local storage policy.

International transfers

The website's server (Vercel's functions) runs in London (United Kingdom), the configured region, and the database (Supabase) is hosted in the United Kingdom, where Supabase mainly processes it under its data processing agreement. The European Commission has recognised that the United Kingdom provides an adequate level of protection (adequacy decision). This does not cover everything Vercel processes: its delivery network is worldwide and the logs of its delivery network (CDN) and its firewall may be outside that region (see the next paragraph). The database only contains public data about petrol stations and prices, not user data.

Some providers are based in the United States or may process data there: Vercel (website hosting and its delivery network) and GitHub (downloading the public prices and backups, with no data about website visitors).

About Vercel: the service is provided by Vercel Inc., based in the United States. According to its support team's reply, its data processing agreement is incorporated into its Terms of Service by reference (Section 11.1) and also applies to the Hobby plan, which is the one we use. According to the provider, transfers rely on the EU-US Data Privacy Framework, under which Vercel Inc. is certified, and on standard contractual clauses. The providers it relies on are mainly Amazon Web Services (AWS); Vercel publishes its list at security.vercel.com.

About Supabase: the service is provided by Supabase Pte. Ltd., based in Singapore. According to its data processing agreement, it mainly stores and processes the data in the chosen region (London), except where necessary to provide the service, and transfers rely on the EU standard contractual clauses and the UK addendum. The database contains no data about website visitors.

GitHub's transfers may rely on the mechanisms it offers in its data protection terms, such as the EU-US Data Privacy Framework or standard contractual clauses. You can ask us for information about transfers by writing to contacto@fuelworld.app.

The emails you send us are received on DonDominio's email service (Soluciones Corporativas IP, S.L.). According to the provider, its servers, its backups and its support are in Spain, and no international data transfers take place.

To draw the map, your browser connects directly to OpenFreeMap (tiles.openfreemap.org), a service operated by Hyperknot Software Kft., based in Hungary (European Union), which according to OpenFreeMap uses Cloudflare as a content delivery network (CDN). According to OpenFreeMap, processing usually takes place in Spain or other European Union countries, but it cannot be guaranteed that all processing stays within the European Economic Area. OpenFreeMap states that Cloudflare, Inc. participates in the EU-US Data Privacy Framework and that its agreement with Cloudflare includes standard contractual clauses. FuelWorld is not a party to that agreement.

Retention periods

  • IP address for request limiting: in memory only, in windows of approximately one minute; it is discarded at the next memory sweep or when the server instance shuts down, and is not stored in any database.
  • Edge logs of the hosting platform (Vercel, CDN), with your IP, user agent, time and requested path: up to 24 hours on the Hobby plan, according to the provider's latest reply.
  • Vercel's firewall and security logs, which may include your IP: up to 24 hours on the Hobby plan, according to the provider's latest reply.
  • Vercel's runtime logs, with the address of each request, including its parameters, and the technical error messages: according to Vercel, 1 hour on the Hobby plan.
  • Cache of responses in Vercel's network, linked to the requested address and not to your IP: at most 1 hour for place suggestions and 6 minutes for station searches and the map area.
  • Location, searches and map area: not stored in our database.
  • Emails you send us: 12 months from the last relevant interaction, unless there is a specific legal reason to keep them longer. It is a period set by FuelWorld, applied through a quarterly manual review of the mailbox, with no automatic deletion.
  • DonDominio's email service: rotating backups of email accounts, with a 24-hour window stated by the provider; when the mailbox is closed, according to the provider, messages are deleted immediately; technical logs, for as long as the law requires.
  • Logs of OpenFreeMap, the map service (an independent third party, see “Service providers and data disclosures”): according to OpenFreeMap, its access logs do not store the IP, and its error logs may contain it for up to 7 days, or up to 30 days in the event of security incidents or abuse. Regarding Cloudflare's logs, OpenFreeMap refers to short, rolling windows, without giving a specific period.
  • Data stored in your browser: periods are listed in the cookie and local storage policy.

Your rights

You can exercise your rights of access, rectification, erasure, restriction of processing, objection and portability by writing to contacto@fuelworld.app. Say which right you want to exercise; if needed to identify you, we will ask only for the essential information. We will reply within one month. We process the data in your request in order to handle it, in compliance with the legal obligation to respond to the exercise of these rights (Article 6(1)(c) GDPR, in connection with its Articles 12 to 22).

If you believe we have not handled your rights properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Automated decisions

No automated decisions are made and no profiles are built that produce legal effects on you.

Changes to this policy

If what the website does changes (for example, if advertising or analytics are added), this policy will be updated before the change takes effect.