Privacy Policy

This site is run as a private, non-commercial project by an individual based in Germany. Nothing is sold here; an optional account can be created to save comparisons and routes.

Contact for all data protection matters: hello@nextev.app

A data protection officer is not required by law and has not been appointed.

The website runs on Amazon Web Services EMEA SARL in the eu-west-1 (Ireland) region, so processing takes place inside the European Union. A data processing agreement under Art. 28 GDPR is in place with the provider.

When you open the site, technically necessary access data is processed:

• IP address of the requesting device
• date and time of the request
• the address requested and the volume of data transferred
• response status code
• browser type, browser version and operating system

The legal basis is Art. 6(1)(f) GDPR. The legitimate interest is the secure and stable operation of the website. This data is not merged with other sources and is deleted after 30 days at the latest.

Maps are rendered with Mapbox GL JS, provided by Mapbox, Inc., 740 15th Street NW, 5th Floor, Washington, DC 20005, USA.

When a map loads, your browser connects directly to Mapbox servers. The following is transmitted:

• your IP address
• browser and device information
• the map tiles requested, which reveal the geographic area you are viewing

The map is the core of this service: without it neither a route nor a comparison can be shown. The legal basis is therefore Art. 6(1)(f) GDPR, our legitimate interest in providing the service you requested.

This involves a transfer to the USA, a third country. It is based on the European Commission’s standard contractual clauses under Art. 46(2)(c) GDPR.

Usage telemetry is switched off. Mapbox GL JS sends additional usage statistics to events.mapbox.com by default. That transmission is disabled on this site; only the requests needed to draw the map are made.

For more information see the Mapbox privacy policy: mapbox.com/legal/privacy.

When you start a comparison, we process:

• the start and destination you entered, including their coordinates
• the vehicles and settings you selected
• the calculated result with route, charging stops, times and costs

Processing to perform the calculation you requested is based on Art. 6(1)(b) GDPR. Storing it permanently and serving it at a shareable public address is based on Art. 6(1)(f) GDPR; the legitimate interest is making results shareable and retrievable.

No account is needed. You can request deletion of a stored comparison at any time by emailing hello@nextev.app; please include the address of the result concerned.

You can sign in voluntarily with Google. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, receives the OAuth request and processes the sign-in under its own privacy terms. We receive and store your Google account identifier, verified email address, display name and profile picture URL. We do not receive your Google password.

While you are signed in, each new comparison is also stored in your private account history as an immutable snapshot. You can also create a saved route containing the selected vehicle, start and destination, route settings and frozen calculated result. A saved route is private by link and excluded from search engines, but anyone who obtains its address can open it.

The legal basis is Art. 6(1)(b) GDPR because this processing provides the account functions you request. You can delete individual saved routes and your account from the account page. Deleting an account removes its private history and saved routes; a canonical comparison already published under section 4 remains public until it is separately deleted.

For account-owned share links we record total opens, daily unique opens and the referring domain. To count daily unique opens, the visitor’s IP address, browser user-agent and current date are converted on our server into a keyed, irreversible hash. The raw IP address is not stored for this feature. Daily visitor hashes are deleted after 32 days; aggregate daily totals and referring domains remain. Opens by the signed-in owner and recognisable bots are excluded.

These aggregate share statistics are processed under Art. 6(1)(f) GDPR. Our legitimate interest is showing account holders whether links they deliberately shared were used, without retaining a raw visitor address or building a cross-site profile.

This site sets no cookies for analytics or advertising. Google sign-in uses a short-lived, HTTP-only OAuth state cookie for up to 10 minutes and, after a successful sign-in, an HTTP-only session cookie for up to 30 days. Both are Secure and SameSite=Lax in production and are strictly necessary to secure the account.

Local storage holds storyTransition briefly to carry your selected route into the comparison tool, comparePromptSeen to avoid repeating the comparison email prompt, andnewsletterPrompt to remember whether the newsletter prompt was dismissed or completed. These entries contain selections and prompt state, not the email address itself.

This storage is necessary for functions you request and therefore requires no consent under § 25(2)(2) TDDDG. You can delete cookies and local storage at any time in your browser settings; deleting the session cookie signs you out.

To understand which pages get used we run Plausible Analytics, provided by Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia. Processing takes place on servers inside the European Union; there is no transfer to a third country.

Plausible works without cookies and without storing anything on your device. No information is placed in your terminal equipment and none already there is read, so § 25 TDDDG does not apply and no consent is required.

Only aggregate information is recorded:

• the page opened and the referring source
• browser, operating system and device type
• the country, derived from the IP address
• events such as starting a comparison

Your IP address is not stored. It is used only transiently to form an irreversible checksum together with a random value that rotates daily, which allows repeat visits within one day to be counted. After that no attribution is possible.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is understanding usage of the service in aggregate so we can improve it.

No cross-site recognition takes place, no usage profiles are built and no advertising networks are embedded. More information: plausible.io/privacy.

You can subscribe to our newsletter about product updates. It is processed entirely on our own servers at Amazon Web Services EMEA SARL in the eu-west-1 (Ireland) region; no external sending provider is involved and there is no transfer to a third country.

We store:

• your email address
• the time you signed up
• the wording of the consent you agreed to
• your IP address at the time of sign-up

The time, wording and IP address serve only as proof of consent, which we are required to be able to demonstrate under Art. 7(1) GDPR. The legal basis is your consent under Art. 6(1)(a) GDPR.

We are not currently sending any email. Addresses are only being stored for now. Before the first newsletter goes out we will run a double opt-in confirmation, and only addresses confirmed that way will be mailed.

You can withdraw your consent at any time with effect for the future. An informal message to hello@nextev.app is enough and your address will be deleted. This does not affect the lawfulness of processing carried out before withdrawal.

You have the following rights against the controller:

• access to the data processed about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)

An informal message to hello@nextev.app is enough to exercise them.

Independently of the above, Art. 77 GDPR gives you the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence, your place of work or the place of the alleged infringement.

We update this policy when the processing changes, for instance when a new feature is added. The version available here is the one that applies; the date above shows its status.