Sidewalk Stories

Privacy

Privacy Policy

Last updated: 29 June 2026

Sidewalk Stories is a collection of stories about Amsterdam's water: a newsletter, social media, and self-guided audio walking tours through our iOS and Android apps and our website. This policy explains, in plain language, what we collect, why, and the choices you have under the GDPR.

1. Who we are

Sidewalk Stories is the controller of your personal data under the GDPR.

2. What data we collect

We only collect what we need to deliver the tours and run the service:

  • Account & purchase data: the minimum we need to unlock and deliver paid tours (e.g. an anonymous identifier, purchase token, and on the web your email address to send your order).
  • Payments: handled by third-party processors. In-app purchases go through Apple (App Store) on iOS and Google (Google Play) on Android. Web purchases go through Mollie. We do not store full card details; the processor handles payment data.
  • Analytics: we use PostHog (EU-hosted) to understand how the app and website are used through aggregated, privacy-respecting event data. We do not build advertising profiles.
  • Backend & hosting: tour content and entitlements are stored with Supabase.
  • Feedback: when you choose to send feedback via a Tally form, we receive whatever you submit (e.g. your message, and your email if you provide it).
  • Technical data: standard device/browser information and basic logs needed for reliability, security, and debugging.

3. What we do not collect

The app does not track your GPS or background location. "Open in Maps" buttons simply hand off preset coordinates to Apple Maps or Google Maps, which then operate under their own privacy policies.

We do not sell personal data, and we do not share data for advertising or cross-site profiling.

4. Why we process your data (legal bases)

  • Performance of a contract: to provide tours, unlock paid content, and process your purchase.
  • Legitimate interests: to keep the service reliable and secure, to improve the product through aggregated analytics, and to respond to feedback.
  • Consent: where required, e.g. for non-essential cookies or optional feedback forms. You can withdraw consent at any time.
  • Legal obligation: to meet tax, accounting, and other legal requirements.

5. Cookies & similar technologies

The website uses a small number of essential cookies/local storage entries to make the site work (e.g. remembering your language choice), and PostHog analytics to understand aggregated usage. We do not use advertising cookies.

Where consent is required for non-essential cookies, we will ask before placing them, and you can change your choice at any time.

6. Third parties & sub-processors

We rely on a small set of carefully chosen sub-processors who process data strictly on our behalf:

7. Data retention

We keep personal data only as long as needed for the purpose it was collected: purchase and entitlement data for as long as you can use what you bought and to meet legal/accounting obligations (typically 7 years for invoices under Dutch law); analytics data in aggregated form; feedback for as long as needed to follow up. When data is no longer needed, we delete or anonymize it.

8. Your rights under GDPR

You have the right to:

  • access the personal data we hold about you,
  • ask us to correct inaccurate data,
  • ask us to delete your data (right to erasure),
  • receive your data in a portable format,
  • object to or restrict certain processing,
  • withdraw consent where processing is based on consent.

To exercise any of these, email support@sidewalkstories.eu. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

9. International transfers

Some of our sub-processors are based outside the EU/EEA, or may transfer data internationally as part of their normal operations. Where this happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

10. Children's privacy

Sidewalk Stories is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you in the app or on the website.

12. Newsletter & social media

We publish stories about Amsterdam's water through a newsletter and on social media (Instagram, TikTok, and Substack). If you subscribe to our newsletter, you provide your email address so we can send you new stories. We do not merge newsletter subscriber data with app purchase data.

Interactions on social media platforms happen under those platforms' own terms and privacy policies.

13. Contact

For any privacy questions or requests, contact: