Privacy policy

Last updated: 10 November 2026

Who runs the site

beforeafter.cc is a non-commercial project run by a private person, Evgenii Serdiukov (Snowy Owl). For any question about your data write to snowy-owl@beforeafter.cc.

In short

• The map and the places are open to everyone, without an account.
• Google Analytics runs only if you accept it in the cookie banner.
• There are no ads, and no data is sold or shared for marketing.

Cookies

The site keeps nothing else in your browser (no localStorage).

Google Analytics

If you accept it in the banner, the site loads Google Analytics 4 by Google Ireland Limited to count visits and see which pages are viewed. Before that the analytics script is not loaded at all. Google receives your IP address (Google Analytics 4 does not store it), information about the browser and device, the pages you open and the site you came from. The data is kept for 2 months; Google signals and ad personalization are off. Google may process the data in the USA under the EU–US Data Privacy Framework. The basis is your consent (GDPR art. 6(1)(a)). You can withdraw it at any time with “Cookie settings” below or at the bottom of the menu: the Google Analytics cookies are then deleted. More: Google Privacy Policy.

Google Maps

The map is Google Maps by Google Ireland Limited. Your browser loads the map, with its own fonts, directly from Google, so Google receives your IP address and the parts of the map you look at. The fonts of the site itself come from our server. When a link has neither a place nor a map position, the site asks the Google Geolocation API for your approximate location by IP address to show the map around you. The “My location” button uses the location from your browser only after your browser asks you; it is used to move the map and is not sent to our server. The basis is our legitimate interest in showing the map, the main function of the site (GDPR art. 6(1)(f)).

Server logs

Our server records requests: IP address, time, the address requested and the browser (User-Agent). This is needed for security and to fix problems (GDPR art. 6(1)(f)); the logs are not used for anything else and are deleted automatically. To slow down password guessing, the server remembers the IP addresses of login and password reset attempts in memory for up to one hour.

Accounts

Accounts are created only by the site owner: there is no public registration. For an account the site stores the email address, name, username, a hash of the password (never the password itself) and the language of emails. For each login (device) it stores the IP address, the browser (User-Agent) and the time of the last visit, so that you can see your devices and log out of them in the profile; this is deleted 30 days after the login has ended. Links from emails (password reset, email change) are stored only as hashes and deleted 7 days after they expire. Emails are sent from the site's own mail server. The places you publish show your name and username. The basis is the use of the account you asked for (GDPR art. 6(1)(b)) and security (art. 6(1)(f)).

Your rights

Under the GDPR you can ask to see the data about you, to correct or delete it, to restrict its processing or to receive it in a portable form, and you can object to processing based on legitimate interest. Write to snowy-owl@beforeafter.cc. You can also complain to a data protection authority, for example the one in the country where you live.

Changes

When this policy changes, the date at the top changes too.