Your data, clearly explained.

Data controller

The data controller is Gestore di bevi.gratis.

Last updated: 21 August 2026. This notice may be updated when service features or technical providers change.

What data we process

Browsing and security

As with any website, the hosting provider may receive IP address, request date and time, requested page, response outcome and browser information in its technical logs. bevi.gratis does not store IP addresses or related hashes in its user and report databases.

Device location

If you choose “Find nearby” or start a route, your browser may ask for permission to use your location. Coordinates are used to calculate the requested results; we do not create a location history.

Optional analytics

If you accept optional cookies, Microsoft Clarity and Google Analytics may collect pages visited, clicks, scrolling, visit duration, technical device and browser characteristics, and an approximate geographic location derived from the connection. Clarity may also create technical session recordings. Form fields are masked: we do not configure these tools to capture email addresses or what you type.

Reports and new fountains

When you report a problem, we collect your email, the fountain concerned and the reason for the report. When you suggest a fountain, we collect its coordinates and status; nickname and email are optional. We do not ask for your address or payment details.

The chosen nickname is published next to the fountain as its author; the email address is never published.

Nell’app Android, dopo un invio riuscito, nome o nickname ed email vengono ricordati su questo dispositivo per precompilare i moduli successivi. Puoi modificarli prima di ogni invio o rimuoverli con “Dimentica i miei dati” sotto i moduli. Questa preferenza non memorizza coordinate o contenuti delle segnalazioni. Anche la scelta del tema chiaro o scuro viene conservata sul dispositivo.

Why we use this data

• provide the map, nearby fountain search and requested routes;
• receive, verify and manage community reports and suggestions;
• send any confirmation concerning a suggested fountain;
• protect the service from spam, overload and misuse without creating user profiles;
• diagnose errors and keep the infrastructure secure;
• only with your consent, understand in aggregate how the interface is used and improve its usability and performance.

The applicable legal bases are performance of the service requested by the user, consent for geolocation and optional analytics, and the controller’s legitimate interest in the security and proper operation of the site.

For new fountain suggestions, nickname and email are optional; without an email we cannot send a publication notification. For problem reports, email remains required to receive and verify the submission.

Technical services and recipients

bevi.gratis relies on technical providers closely connected to the requested features:

• OpenStreetMap provides map images and geographic data. Your browser requests map tiles directly from OpenStreetMap servers, which receive standard technical connection data;
• Nominatim receives city searches from the server as needed to return geographic results;
• OSRM receives from the server the coordinates needed to calculate the requested route;
• Microsoft Clarity, only after consent, provides usage analytics, heatmaps and technical session recordings to help us improve the site;
• Google Analytics 4, only after consent, provides aggregate analytics about visits, pages viewed, devices and service use. Advertising features and Google Signals are disabled;
• the hosting and email provider processes the technical data required to host and protect the site and send service emails.

Geographic searches are kept in the server’s technical cache for up to 30 days; routes for up to 7 days. We do not sell personal data or disclose it for advertising or market research.

You can read the privacy notices of OpenStreetMap, Microsoft and Google. Any processing outside the European Economic Area depends on each provider’s infrastructure and is governed by the safeguards required under applicable law.

Cookies, local storage and installation

On your first visit, Clarity and Google Analytics are disabled and no data is sent to Microsoft or Google. If you accept, Clarity may set _clck and _clsk; Google Analytics may set _ga and _ga_<ID>. These distinguish visits and sessions and produce usage analytics. Personalised advertising and advertising storage remain disabled.

Your choice is saved in your browser’s local storage for six months. You can change it at any time with the Manage cookiesbutton; refusing does not limit any site feature.

The language selected in the menu is stored locally and in a technical cookie under the key bevi_language_v1. It is used only to remember the requested language and can be removed by clearing the site data.

The administrator area uses a secure technical session cookie required for access.

If you install bevi.gratis as an app, the browser uses Cache Storage to keep interface files and make opening faster. These files are not used to identify you and can be removed by clearing site data or uninstalling the app.

You can withdraw geolocation permission at any time in your browser or device settings.

Retention and security

Data is retained for as long as necessary to provide the service, manage reports, maintain database quality and protect the site from abuse. According to Microsoft documentation, Clarity recordings are retained for 30 days; aggregate data, heatmaps and labelled sessions may be retained for up to 9 months. Google Analytics cookies have a default duration of up to 2 years; user-level data retention in the Analytics property can be configured for up to 14 months.

We use technical measures including HTTPS connections, restricted administrator access, hashed passwords, secure sessions, anti-CSRF tokens, request limits and change logs. No system can guarantee absolute security.

Your rights

Where provided by Regulation (EU) 2016/679, you may request access, correction, erasure, restriction or portability of your data, object to processing and withdraw consent without affecting processing already carried out.

You also have the right to lodge a complaint with the Italian Data Protection Authority.