Privacy policy
Last updated: October 20, 2026
This page is a courtesy translation. The Spanish-language version is the only one with legal effect and prevails in case of any discrepancy between the two.
1. Data controller
Interactive Bible Atlas is a personal project run by an individual, with no separate legal personality. As an individual controller without a professional address, only a dedicated contact email is provided, which is sufficient for exercising the rights described in section 9:
- Owner: Atlas Bíblico Interactivo (personal project)
- Contact: contacto@atlas-biblico.com
2. This site does not collect data through forms
Interactive Bible Atlas has no contact forms, registration, comments, or newsletter. The map's search boxes filter content in your own browser; nothing you type there is sent to any server. The application's state (pinned locations, active filters, selected year) lives only in the page's memory and is lost on reload — it is not saved on your device.
The one exception is a value in localStorage, atlas-intro-seen
(remembers whether you've already closed the welcome message). It does not identify who you
are, is never sent to any server, and you can delete it at any time from your browser
settings — see the cookie policy for more detail.
There is, in addition, an aggregated, cookie-free audience measurement (section 4).
3. What data is processed and on what legal basis
| Data | Source | Purpose | Legal basis |
|---|---|---|---|
| IP address, User-Agent, date/time, requested pages | Technical hosting server logs (unavoidable on any website) | Providing the service, ensuring the site's security and stability, and producing aggregated, non-identifying statistics | Legitimate interest (Art. 6.1.f GDPR) in the proper functioning and security of the site |
| Page visited, referring page, timestamp, approximate country/region/city, operating system, browser and device type | Audience analytics (Vercel Web Analytics) — see section 4 | Understanding in aggregate what content is consulted, to maintain and improve the site | Legitimate interest (Art. 6.1.f GDPR) in measuring site usage with the minimum data possible |
No other personal data voluntarily provided by the user is processed, because there is no mechanism to provide any.
4. Audience analytics: Vercel Web Analytics
Since September 2026 this site uses Vercel Web Analytics, an audience
measurement service from Vercel Inc. (United States), the same provider that
hosts the site. It loads as a small JavaScript file served from this same domain
(/_vercel/insights/script.js): there are no requests to third-party domains or any
advertising network.
What is recorded on each visit
For each page view, a record is sent with these fields:
- The page address visited and its query parameters (filtered).
- The referring page (referrer), only when you arrive from another website.
- The date and time and the version of the measurement script.
- Derived server-side from the request itself: approximate country, region and city, operating system and version, browser and version, and device type (mobile, tablet, or desktop).
No user identifiers, custom events, or anything you typed into the map's search boxes are
recorded. This site does not use the beforeSend function to modify events because
its URLs contain no personal information: they are fixed routes such as
/en/places/hebron.html.
No cookies and no identifiers on your device
This is what matters for your privacy, and it is verifiable in the script's own code:
- It installs no cookies — neither first-party nor third-party.
- It writes nothing to your device: it does not use
localStorage,sessionStorage, IndexedDB, or any other browser storage. - It does not fingerprint you: it does not read screen resolution, installed fonts, canvas output, timezone, or any other device signal. The only things it reads from your browser are the page address, the referring page, and the user-agent string — the latter solely to filter out automated bots, and it is data your browser sends in the header of every HTTP request regardless.
- To avoid counting the same person twice, Vercel computes a hash from the incoming request on its own server. That temporary identifier lives on Vercel's servers, not on your device, and is automatically discarded after 24 hours, so it cannot reconstruct your browsing across days, nor across this and other sites.
Vercel expressly documents that Web Analytics does not collect identifiers that would allow tracking or cross-referencing users across different applications or websites, and that the data is used only in aggregate.
Why this site still doesn't need a cookie banner
Article 22.2 of Spain's LSSI-CE (implementing the ePrivacy directive) requires prior consent to "store information or gain access to information already stored" on a user's terminal equipment. As explained above, this analytics tool stores nothing on your device and accesses no information stored on it: the visit identifier is computed server-side from data your browser inevitably transmits when requesting the page. With no storage and no access to the terminal, Article 22.2 does not apply and no consent banner is required.
There is, however, personal-data processing under the GDPR — the request-derived visit hash is pseudonymized data — and it is therefore based on the legitimate interest of Article 6.1.f GDPR, disclosed on this page, with a right to object recognized in section 9.
Retention
Aggregated data remains available in the Vercel dashboard for the query window of the plan in use, which for the free (Hobby) plan this site uses is 1 month. Vercel notes in its documentation that it may retain data for longer than that guaranteed window. The temporary visit identifier, by contrast, is discarded after 24 hours.
If you'd rather not be counted
You can object to this processing by writing to the email address in section 1. In
addition, since the measurement depends on a JavaScript file, blocking requests to
/_vercel/insights/* with any content blocker is enough to prevent your visits from
being recorded; the rest of the site keeps working normally. Disabling JavaScript entirely also
prevents it, but in that case the interactive map stops working (text pages, such as each
place's page, remain fully readable).
5. Advertising
This site shows no advertising and loads no resources from any advertising network. If advertising were added in the future, this policy and the cookie policy would be updated before it is switched on, and prior consent would be requested where required.
If you visited this site while it showed Google AdSense ads (until October 20, 2026), your
browser may still hold Google cookies or an old localStorage value
(atlas-ads-consent) from that time. They are no longer used and you can delete them
from your browser settings.
6. Data processor: hosting
This site's source code is managed in a GitHub repository (version control; it plays no part in processing public-site visitor data) and is deployed and served via Vercel Inc. (440 N Barranca Avenue #4133, Covina, CA 91723, United States), which acts as data processor both for the technical logs described in section 3 and for the audience analytics in section 4, under Article 28 GDPR, by virtue of its Data Processing Addendum and its Privacy Policy. Vercel retains information "for the minimum period necessary to comply with its legal and contractual obligations", without specifying an exact number of days in its public policy.
7. Third parties your browser connects to
When loading this page, your browser contacts these external services besides this hosting (the analytics script from section 4 is served from this same domain, not from a third-party domain):
| Service | What for | Receives your IP |
|---|---|---|
tile.openstreetmap.org (OpenStreetMap Foundation, United Kingdom) |
Loading the base map tiles (images) | Yes — this is essential to display the map. See its privacy policy |
The typefaces (Cinzel, Lora) and the mapping library (Leaflet) are hosted on this same domain — they are not loaded from Google Fonts, unpkg, or any other third-party CDN.
This site's outbound links to BibleGateway and Google Maps are only activated if you click them, and take you to sites with their own privacy policies, unrelated to ours.
8. International transfers
The OpenStreetMap Foundation is based in the United Kingdom, a country with an adequacy decision from the European Commission, so no additional safeguard is required for that transfer.
Vercel Inc. (hosting and audience analytics — see sections 4 and 6) is based in the United States and is certified under the EU-U.S. Data Privacy Framework, recognized by the European Commission as an adequate safeguard for these transfers under Article 45 GDPR.
9. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction, and portability by writing to the contact email given in section 1.
In particular, since the processing in section 3 is based on legitimate interest, you have the right to object to it at any time (Art. 21.1 GDPR). For audience analytics, section 4 also explains how to prevent your visits from being recorded on your own.
If you believe this processing does not comply with applicable regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es, C/ Jorge Juan 6, 28001 Madrid, Spain) — the competent authority under Spanish law, which governs this site regardless of the language in which you read it.
10. Minors
This site is not specifically directed at minors, although its content is suitable for all audiences. No identifying data is collected from any user, and no registration or minimum age is required to browse the site. The analytics in section 4 is aggregated and does not build profiles, so it does not raise the issues addressed by Article 8 GDPR or Article 7 of Spain's LOPDGDD.
More information
See also the legal notice and the cookie policy.