Privacy Policy


My-OSM-Notes is downstream data controller which processes data from latest OpenStreetMap notes planet dump, governed by this privacy policy.

What data is stored processed by My-OSM-Notes?

All data from latest OpenStreetMap notes planet dump is stored and processed, which specifically includes (a) user-specified Usernames (which may or may not be their real-life names or other identifiable data), (b) any user-specified data in comment of the Notes which may contain personal information, (c) Geo-location of Notes and (d) timestamps of creation and updates of Notes.

Why do we store and process personal data?

The purpose of the OpenStreetMap project and the OSMF is to provide open geographic data, such as street maps, to anyone. The specific purpose of My-OSM-Notes is to allow individual mappers and groups to easily find their own publically published notes and resolve them.
To fulfill the goal we (as a downstream data controller) process this publically available data on a legitimate interest basis (see GDPR article 6.1f ).

Where do we store the data?

Copy of Notes data, as well as indexed database created from it, is stored on servers in Croatia, EU.

How can you control the processing of your data and reduce privacy related issues

See here. Any changes made to master OSM Notes database will be propagated to this web page, usually within 48 hours.

Account removal

Please see OSMF Account removal instructions. Data available for searching will be removed/amended when the next Notes update happens (usually within 48 hours after removal).

Right to Object

You have a right to object against processing based on legitimate interests of the data controller.

Right to lodge a complaint with a supervisory authority

You have a right to lodge a complaint with a supervisory authority (see GDPR article 14.2e ).

Data we receive automatically

When you visit this website, records of that use are automatically produced. Collected detailed information, including (but not limited to) (a) IP address, (b) browser and device type, (c) operating system, (d) referring web page, (e) the date and time of page visits, and (f) the pages accessed on website, is saved for up to 60 days for purpose of troubleshooting by system administrators and producing anonymous publically available website usage statistics, retained indefinitely. The above mentioned data is processed on a legitimate interest basis (see GDPR article 6.1f ).


In case of questions or issues, please contact us.