Privacy Policy

Last updated: March 2026

opencargo.bike is operated from Copenhagen, Denmark. We take privacy seriously — this policy explains exactly what data we collect, why, and what we do with it.

What we collect

1. Contribution form submissions

When you submit a maker, product, or request via the /contribute page, we store the information you provide (maker name, website, description, etc.) in our database. We do not collect your email address, name, or any personal identifiers. Submissions are voluntary and reviewed before publishing.

2. Rate limiting

To prevent spam on the contribution form, we temporarily process your IP address in server memory. This is not stored in any database and is discarded when the server restarts. The IP is used solely to enforce a limit of 5 submissions per hour.

3. Anonymous analytics

We use Vercel Analytics and Vercel Speed Insights to understand which pages are visited and how fast they load. These tools are cookieless — they do not set cookies, do not track individual users, and do not collect personal data. All data is anonymous and aggregated. No IP addresses are stored. See Vercel's analytics privacy policy.

4. Hosting logs

Our hosting provider (Vercel) may collect standard server access logs including IP addresses, browser type, and pages visited. These are managed by Vercel under their privacy policy. We do not add any analytics, tracking pixels, or third-party scripts to the site.

5. Cookie consent preference

We store a single cookie (oc_consent) to remember that you've acknowledged this notice. It contains no personal data — just the value "accepted" and an expiry date. No other cookies are set by this site.

What we don't collect

• No user accounts or authentication
• No email addresses
• No personal analytics or tracking (Vercel Analytics is cookieless and anonymous)
• No advertising or marketing trackers
• No third-party scripts — fonts are self-hosted
• No fingerprinting or cross-site tracking
• No localStorage or sessionStorage

Third-party services

Supabase (database) — stores product, maker, and submission data. Hosted in the EU. No personal data is stored except voluntarily submitted form content.

Vercel (hosting) — serves the website. May process server logs. See Vercel's privacy policy.

No other third-party services are used. No data is shared with advertisers, analytics providers, or social media platforms.

Your rights (GDPR)

Under the General Data Protection Regulation, you have the right to access, correct, or delete any data we hold about you. Since we collect almost no personal data, this mainly applies to contribution form submissions. To make a request, email hello@opencargo.bike.

Legal basis

We process the limited data described above under Article 6(1)(f) GDPR (legitimate interest) for rate limiting, and Article 6(1)(a) (consent) for contribution form submissions. The consent cookie is processed under Article 6(1)(a).

Questions? Email hello@opencargo.bike