Privacy
What Yet Another Tiny Prague stores about you, why, and how to have it removed.
Who is responsible
Yet Another Tiny Prague is run by Jonas Jančařík, who is the controller of the data described here. Contact: yatinyprague@j11k.eu.
Email updates
If you sign up for updates, we store your email address, the language you signed up in, whether you signed up on the website or in the painting client, and when you signed up and confirmed. On the website, Cloudflare Turnstile briefly looks at your IP address and browser details to tell people from robots; we don't store them. When you sign up from the painting client, a scrambled (hashed) form of your IP address is kept for a day, to limit how many sign-ups can come from one place.
We use your address only to send you a few emails a year about how the map is going. We don't sell it or pass it on, and we don't track whether you open our emails. The legal basis is your consent (Art. 6(1)(a) GDPR), which you give by signing up and confirming, and which you can withdraw at any time.
We keep your address until you unsubscribe. Every email has an unsubscribe link, and pressing it deletes your address straight away. If you don't confirm a sign-up within 7 days, we delete the address ourselves.
Painting frames
If you lend your computer to paint frames, we store the name you chose (shown publicly on the leaderboard), a scrambled form of your key, which frames you painted and when, how long each took, and the type of computer the client reports (for example "arm64 Mac"). Your paintings become part of the public map. To limit sign-ups, a scrambled form of your IP address is kept with each new painter sign-up for a day. We use this only to run the project you chose to take part in (Art. 6(1)(f) GDPR). To have your name removed, write to the contact address above.
Who processes the data for us
Cloudflare, Inc. hosts the website and stores the databases, paintings and map, and sends our emails, as our processor. The database of email addresses is restricted to the European Union. Cloudflare is a US company; where data reaches the US, this is covered by the EU–US Data Privacy Framework, which Cloudflare has joined.
Your rights
You have the right to find out what data we hold about you, to have it corrected or deleted, to withdraw consent at any time, to ask us to restrict processing, and to get your data in a machine-readable form. If you think we handle your data badly, you can complain to the Czech Office for Personal Data Protection (uoou.gov.cz).
Visiting the site
We don't use analytics or advertising cookies. Cloudflare works with your IP address to deliver the pages, which is needed for the site to load. If you switch the language, only your own browser remembers it.
Last updated 9 November 2026.