Privacy
Last updated: 26 October 2026
English · Svenska · Türkçe · Deutsch · Español · Français
SunPeek estimates how much direct sun a building wall gets. It has no accounts, no ads and no tracking cookies, and it does not sell or share data for marketing. This page lists everything that leaves your device, who receives it and for how long it is kept.
Who is responsible
SunPeek is a free, non-commercial project run by its developer in Sweden. Contact, questions and requests (access, deletion, objection): github.com/tbelbek/sunpeek/issues. If you would rather not write in public, open an issue asking for a private channel and do not include personal details.
On your device
- Settings and history (language, clock format, floor, saved walls with their addresses): stored in your browser (localStorage). They never leave your device and you can delete them by clearing the site's data.
- Map data cache (buildings, terrain tiles, sunshine data): stored in your browser (IndexedDB) so places you have seen open faster; buildings are refreshed after 90 days, terrain after a year.
- Location and compass: used only if you allow them, and only inside the page, to centre the map and turn it with your phone. Your exact position is not sent anywhere; to fetch map data the app sends the area around it (see below).
SunPeek's own server
A shared, anonymous cache, so that an area someone has already loaded opens instantly for everyone. It receives only what is needed to fetch map data: area cell numbers (about 500 m squares), map tile numbers, a ~10 km cell for sunshine data, the text you search for, and, for saved walls, the wall's position to look up its address.
| Kept on the server | For |
|---|---|
| Buildings for an area | 90 days |
| Trees for an area | 90 days |
| Terrain tiles | 1 year |
| Sunshine data for a ~10 km cell | 400 days |
| Overture building tiles | 60 days |
| Search text and its results | 30 days |
| Address of a position (rounded to ~1 m) | 90 days |
Sun check: if you are within about 150 m of the wall you selected and the sun is on its side, SunPeek may ask whether there is sun on the wall right now. Only if you answer, it sends the answer, the wall's position rounded to about 10 m, its direction, the floor and SunPeek's own estimate for that moment. This is kept for 2 years to measure how accurate the estimates are, without an IP address or device identifier.
None of these entries contains an IP address, a device identifier or an account, so they cannot be linked back to you. The server keeps no access log. To stop abuse it counts requests per IP address in memory for one minute; that counter is never written to disk.
Other services your browser talks to
Like any website, your browser sends your IP address and browser type to each service it fetches from. These services receive the area you are looking at, never your exact GPS position:
- Cloudflare (USA/EU): carries all traffic to sunpeek.uk and protects it from attacks, and, only with your consent, counts visits (see below). See Cloudflare's privacy policy.
- Esri (USA): satellite imagery tiles for the area on screen.
- unpkg: the map library files, loaded once; no location data.
- Only when SunPeek's server cannot answer: OpenStreetMap Overpass (buildings), Overture Maps / Amazon S3 (backup buildings), AWS Terrain Tiles (terrain), Open-Meteo (elevation, time zone, sunshine data) and Photon by komoot (search text and the position of a saved wall).
The in-app data card (More › SunPeek cache › details) shows how many requests went to each service during your visit.
Visitor statistics
Only if you choose Allow when SunPeek asks, it loads Cloudflare Web Analytics, which records the page, country, browser type and the site you came from. It uses no cookies and does not identify or follow you across sites; Cloudflare keeps the raw data for a short time and then only totals. If you choose No thanks, the script is never loaded. You can change your choice at any time under More › Visit statistics.
Legal basis
Providing the service you ask for (fetching map data, searching, looking up addresses) and keeping it secure are based on legitimate interest (GDPR Art. 6(1)(f)). Location and compass access are based on your permission in the browser, and visit statistics on your consent (GDPR Art. 6(1)(a) and the Swedish Electronic Communications Act, ch. 9 §28); you can withdraw both at any time. Settings and history kept on your device are necessary for the service you use and need no consent.
Your rights
You can ask for access, correction or deletion and object to processing. Because the server stores no identifiers, we usually cannot find entries that belong to you; a search you made can be deleted if you tell us its exact text. Data on your device is under your control: clear the site's data in your browser. You can also complain to the Swedish data protection authority, IMY.
Changes
If this changes, this page is updated and its date changes. The full history is in the public repository.