battleMap Privacy Policy
This is an English translation provided for convenience; in case of discrepancies the Polish version prevails.
This document describes what personal and technical data battleMap
collects from you when you use the service at
battlemap.online (including subdomains and the paths /,
/livemap/). The data controller is SISL.pl,
based in Poland; contact: admin@sisl.pl.
What data we collect
We try to collect as little as possible. The list below is complete:
- Visit analytics — we use Ahrefs Web Analytics
(lightweight, no advertising profiles). The script from
analytics.ahrefs.comrecords the URL, the Referer header, the browser language and an approximate location (country). Cookies with the prefix_ahrefs_*. - Google AdSense ads — when AdSense is active,
Google sets the cookies
__gads,__gpiand related ones to count impressions and to personalise ads (if the user has given consent through Google's European consent banner). - Session cookie —
_battlemap_session, HTTP-only, signed, used to keep you logged in and to show flash notifications. It expires after 30 days or on logout. - Web token —
web_token, used in the Telegram bot integration to log you in with your Telegram account. - User account (optional) — if you register an account: e-mail, hashed password (bcrypt), account creation date, subscription plan, API keys (if generated).
- Stripe payments — if you buy a paid plan, Stripe (an independent controller) processes your card data; we receive only the customer identifier, the subscription identifier and the status. We never see your card.
- Telegram — if you subscribe to our bot: we store your numeric Telegram identifier, your username (if disclosed) and your notification preferences.
- Server logs — IP address, user agent, response code, request time. Kept for up to 30 days for security purposes (anti-bot, anti-DDoS).
What we do not collect
- We do not sell personal data to third parties.
- We do not track you after you leave our domain.
- We do not collect biometric or health data.
- We do not require an account to use the conflict map, the public preview API, or the free-tier flight/ship tracker.
- We do not use browser fingerprinting.
Retention
| Category | Retention period |
|---|---|
| User account | until the account is deleted |
| HTTP logs | 30 days |
| Session cookie | 30 days |
| Stripe invoices | 5 years (Polish tax requirements) |
| Telegram subscription | until unsubscribed with the /stop command |
Your rights (GDPR)
As a resident of the EEA you have the right to: access your data, rectification, erasure (the "right to be forgotten"), restriction of processing, data portability, and to lodge a complaint with the supervisory authority (in Poland: the Polish data protection authority (UODO), headed by the PUODO). To exercise any of these rights, write to admin@sisl.pl — we respond within 30 days.
You can delete your account yourself from the dashboard or by e-mail request. Deletion covers all account data — e-mail, password, API keys, login history. Invoices are retained, but anonymised where possible.
Legal basis
We process data on the basis of: (a) consent (analytics, personalised ads); (b) contract (account, subscription); (c) legitimate interest (security, anti-fraud); (d) legal obligation (invoices, requests from public authorities where necessary).
Contact
Privacy questions: admin@sisl.pl · the subject line "GDPR (RODO)" is welcome. Full contact details: contact page.