Privacy notice

Last updated: 13 November 2026

AED Atlas is a community map of AEDs in Hungary. Dr. Pál-Jakab Ádám runs it as a volunteer, as a private individual. For questions or requests, use the Contact page.

What we keep, and why

• Account: your email address and name, so you can sign in. Passwords are stored only in hashed form. With Google sign-in, Google shares only your name, email address and profile picture.
• Profile and points: your display name, points and badges. Your name is public on the leaderboard; your email address is not.
• AED reports: location, address, description, opening hours and photos, plus reviewers' comments and the history of changes. After volunteer review, the AED's details and photos are visible to everyone on the map. Please don't photograph people.

Who processes it

• Lovable Cloud (Supabase): the database, sign-in and photo storage.
• Cloudflare: serves the website, and sees your IP address to do so.
• OpenStreetMap: the map and address search. The map loads map tiles for the area you are looking at. Addresses you type, and the point you pick when reporting an AED (your exact position, if you use the "my location" button), go to OpenStreetMap's address service (Nominatim).
• Google: fonts on every page, and Google's own sign-in button on the sign-in page. Google loads that button, so it sees the visit even if you don't sign in with it; if you are signed in to Google, the button may show your name. With Google sign-in, Google shares your name, email address and profile picture.
• The chat (bottom right, on most pages): your messages go to an AI (Google Gemini, through Lovable's service) so it can answer. If a message mentions a place (for example "near", "nearest", "where", "find"), your browser asks for your location, and if you allow it, your exact location is sent too. We don't store the conversation.
• The directions buttons (Apple Maps, Google Maps, Waze) send data only when you tap them.

Don't put health information or other sensitive details into the chat or into reports.

Location, cookies, analytics

• The "AED near me" button uses your location inside your browser to find the nearest AED; the coordinates aren't sent or stored. The map then loads map tiles around that AED from OpenStreetMap.
• There are no advertising or tracking cookies and no visitor analytics. Your browser keeps your sign-in locally so you don't have to sign in every time.
• The emergency page works offline and collects nothing.

Deletion and your rights

You can ask for your account to be deleted with the "Request account deletion" button on your Profile page, or on the Contact page. Requests are handled by hand: we then delete your account and the personal data linked to it. AEDs that were already approved may stay on the map without your name, because a device's location is not personal data.

You can ask for a copy of your data, or for it to be corrected or deleted. If you think your data is not handled properly, you can complain to a data protection authority (in Hungary: NAIH).