Privacy Policy

Last updated: July 27, 2026

Your privacy matters to us. This Privacy Policy explains what information we collect, how we use it, and what rights you have under the General Data Protection Regulation (GDPR). We also describe how we work with trusted third-party providers, some of which are based outside the European Union. Please take a few minutes to read through — we've tried to keep it clear and human-friendly.

What information we collect

The information we collect depends on how you use our website.

If you use our free service, you don't need to register. We only process the technical details your browser automatically sends when loading a webpage — for example your IP address, browser type, and the page you requested. This information is necessary for the site to function and is used beyond that only in anonymized or redacted form (for example, IP addresses are redacted) to generate statistics about the use of our website and to ensure security and stability. We do not link this data to any personal information.

If you use map features (Google Maps or Apple Maps) and their geocoding services, your requests are transmitted to the respective provider only with your consent. When you enter a location and select a satellite, this information gets transmitted to our servers so that the satellite calculations can be performed and returned. When we do so, we update our statistics on country and satellite usage. We do not store your specific location data or link it to any identifying information.

On the free service we may display advertising through Google AdSense. AdSense is loaded when the page is opened. Google manages the applicable advertising privacy and consent choices through its own certified Consent Management Platform (CMP), separately from DishPointer's cookie consent tool.

To tailor the service to your region, we perform an IP-to-country lookup on our own servers. This helps us preselect your country and set currency/pricing, choose the appropriate satellite/region configuration, and indicate whether certain features or services are available in your location. On the free service, this is used when you visit the site. On the premium service, it is used to suggest a country during sign-up if you do not select one yourself. We use this only at country level (not precise location). Your IP address is used only transiently for the lookup during your session and is not stored by us for this purpose; we store only the resulting country selection for the session and/or your account (and you can change it).

If you become a premium subscriber, you create an account so we can grant you access to premium content and services. For that purpose we process your email address, the country you selected, login credentials, and your subscription status. Payments are handled securely by our payment provider (Stripe) and we do not store full card details on our servers.

The premium service includes map features (Google Maps and Apple Maps) as part of the service and these are processed on the basis of contract performance. When using the premium service you may explicitly ask us to store preferences or favourites (for example your favourite satellites) — those items will be stored only when you explicitly request them. We also log access events (number of visits, number of map requests and related technical metadata) for the limited purpose of enforcing our stated usage limits and ensuring service reliability. We do not store raw location search strings or location coordinates unless you explicitly save them as favourites.

If you contact us by email or via a support form we collect the information you provide (for example your email address and message) so we can reply. This data is used only for communication and is stored securely.

Why we process your data

We only process personal data when we have a valid reason for doing so. The legal basis depends on the context:

• Contract performance (Art. 6(1)(b) GDPR): granting access to premium content and services, managing subscriptions, and delivering account-related features.
• Consent (Art. 6(1)(a) GDPR): for optional features such as map services, saved preferences, external media embeds, and personalized advertising where applicable — you may withdraw consent at any time.
• Legitimate interest (Art. 6(1)(f) GDPR): ensuring platform stability, preventing abuse and fraud, and running a secure service (for example server logs in anonymized form, DDoS protection, and service monitoring).
• Legal obligation (Art. 6(1)(c) GDPR): where we must retain specific data for tax, accounting, or regulatory reasons.

For free users, the reasons include ensuring the site functions correctly, showing maps or personalized advertising if you have consented, and protecting our systems from misuse. For premium subscribers, the reasons are to create and manage your account, provide you with access to premium content and services, handle payments, integrate map features, prevent misuse and ensure the security and safety of our systems and your data, and comply with legal obligations such as tax and accounting requirements. We do this as the Data Controller, namely DP Tec Solutions GmbH, Humboldstr. 25, 21059 Glinde, Germany, telephone: +49 40 609 440 37, e-Mail: [email protected], within the meaning of the GDPR.

Newsletter and updates

When you create an account you may opt in to receive our newsletter and occasional product updates. This is separate from your subscription and requires explicit consent (Art. 6(1)(a) GDPR). We use your email only for the stated purpose and never share it with third parties for marketing. You can withdraw your consent at any time via the unsubscribe link included in each message or by contacting us.

Cookies and consent management

Our website uses cookies and similar technologies such as local storage, script loading, pixels, SDKs, and embedded third-party content. Essential storage is used for basic functions such as session handling, security, and remembering your consent choice. Optional technologies managed by DishPointer's cookie consent tool are used only after consent. You can accept all, deny all, or customize those choices, and you can change or withdraw consent at any time through the Cookie Settings link in the footer. Google advertising choices are managed separately through Google's CMP, as explained below.

When you accept at least one optional category, the consent tool stores an auditable consent record—with a consent ID, selected categories, the policy URL, and timestamps—in a first-party cookie and browser storage for up to one year. The ID is shown in the consent dialog so you can refer to it in questions about past consent. If you deny all optional categories or withdraw all optional consent, we delete that cookie and the corresponding local and session storage records. The site then treats your next page load as having no saved decision, so the consent prompt or an embedded service explanation may appear again.

Consent categories:

• Essential site operation: required for basic site security, session handling, and consent storage.
• Preferences and saved choices: interface settings such as language, units, default country, last entered location/address, and selected satellite.
• Maps and address search: Apple MapKit and related map/geocoding services on the free service.
• External media embeds: YouTube videos and similar embeds. These are not loaded until you consent.

Cookie-free analytics and abuse protection

We use Matomo analytics hosted on our own servers to understand aggregate traffic and usage patterns. This analytics setup does not use analytics cookies or track users across websites. We process this limited, anonymized or redacted information on the basis of our legitimate interests in understanding and improving the service (Art. 6(1)(f) GDPR). Because it does not rely on optional cookies or similar storage, it is not a category in DishPointer's cookie consent tool.

We also use security and abuse-prevention measures, including DDoS protection and anti-abuse tools such as reCAPTCHA where a form or feature requires them. These measures may process technical data such as IP addresses and session telemetry transiently to detect bots, prevent spam, fraud and attacks, and keep the service secure. We rely on our legitimate interests in operating and protecting the service (Art. 6(1)(f) GDPR). This processing is therefore not managed through DishPointer's cookie consent tool and is not affected by the optional choices made there.

Google advertising and consent management

On pages that form part of our free service, Google AdSense is loaded when the page is opened. This causes your browser to connect to Google. Where required based on your location and previous choices, Google displays its own certified Consent Management Platform (CMP). This Google CMP—not DishPointer's cookie consent tool—manages your privacy and consent choices for Google advertising.

Depending on your choices and applicable law, Google may serve personalized, non-personalized, or limited ads. Personalized ads may use information such as previous activity, interests, approximate location, or demographic information. Non-personalized ads are based primarily on contextual information such as the current page, current query, and coarse location, although cookies or similar technologies may still be used for purposes such as frequency capping and aggregated ad reporting where permitted. If you decline advertising personalization, Google will not use previously collected or historical data to personalize the ads shown to you; non-personalized or limited ads may still be displayed.

You can review or change your advertising choices through Google's consent interface when available and through Google Ads Settings. Further information is available in Google's advertising documentation.

Third-party services and international transfers

We use trusted third-party providers to operate and secure the service. Some of these providers are based in the United States. To protect your data when it is transferred outside the EU we rely on the EU–US Data Privacy Framework (DPF) for certified providers. Where a provider is not DPF-certified we use Standard Contractual Clauses (SCCs) and additional safeguards as required.

Your rights

Under the GDPR you have the following rights in relation to your personal data:

• Right of access (Art. 15): request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): request correction of inaccurate or incomplete data.
• Right to erasure (Art. 17): request deletion of your data unless we must retain it for legal reasons.
• Right to restriction (Art. 18): request limitation of processing.
• Right to be informed (Art. 19)
• Right to data portability (Art. 20): request your data in a structured, machine-readable format.
• Right to object (Art. 21): object to processing based on our legitimate interests, including profiling for fraud prevention.
• Right to withdraw consent (Art. 7(3)): withdraw consent at any time (this does not affect processing already carried out).
• Right to lodge a complaint (Art. 77): file a complaint with a supervisory authority.

Right to object (Art. 21 GDPR)

If we process your personal data on the basis of our legitimate interests you may object at any time on grounds relating to your particular situation. If you object, we will stop processing the data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or if the processing is necessary for the establishment, exercise or defence of legal claims.

If we process your personal data for direct marketing purposes (for example, sending newsletters where you have previously consented), you have the right to object at any time and we will stop processing your data for direct marketing immediately.

Automated decisions and profiling

We do not use automated decision-making, including profiling, which produces legal effects concerning you or similarly significantly affects you.

Children's Data

Our services are not directed to children under 16. We do not knowingly collect or process personal data from children under 16. If we become aware that we have collected such data we will delete it promptly.

How we protect your data

We protect personal data using appropriate technical and organizational measures. All connections to our website are encrypted (HTTPS/TLS). We host on secure infrastructure and use industry-standard access controls, encryption, monitoring and patching practices.

How long we keep your data

We keep personal data only as long as necessary for the purposes described in this policy or as required by law. Where processing is based on your consent we keep the data until you withdraw consent. If we process your personal data for direct marketing in accordance with Art. 6 (1) f. GDPR, we store your data until you exercise your right to object. Specific service retention times by third-party providers (for example Stripe, Firebase, Google Cloud) are described above in the relevant provider sections.