Privacy policy
Last updated 1 October 2026
In short: InSite has no accounts and sets no cookies. To build a report we have to send the location you search for to the services that look it up, and our hosting provider keeps short-lived server logs. Our analytics are cookie-free and don't identify you. We don't sell your information or use it for advertising.
1. Who is responsible
The data controller for InSite is Irish School of Traditional Trades Limited, a company registered in Ireland (company no. 729114), registered office No. 11 Whiterock Lane, Whitebrook, Wexford, Y35 A9C6. Contact us about anything in this policy at rob@attuned.ie.
2. What we process, and why
Your searches and the locations you look at
When you search, we process what you type (an address, place name or Eircode), or the point you drop on the map, plus any plot outline you select. We use this only to find the location and build your report. We don't keep it in a database or link it to you, and it isn't needed beyond the request. It does pass through our server logs (below).
Addresses and places are personal data only where they can be linked to a living person, but we treat them carefully either way.
Server logs
Like almost every website, our hosting provider automatically records technical logs of requests to InSite. These include your IP address, the time, the page or data requested (which can include the location you searched for), your browser type, and error details. We use them to keep InSite running, find faults, and prevent abuse. Our app removes API keys from its logs. Logs are kept for a limited period, up to 30 days, then deleted automatically.
Abuse protection
To stop InSite being overloaded or misused, we count requests per IP address over short periods (rate limiting). These counts are held briefly in memory and are not stored.
Analytics
We use Umami, a privacy-focused analytics service, hosted in the EU, to understand how InSite is used: for example, how many visits there are, which pages are viewed, and how often features like search or the 3D view are used. Umami sets no cookies and doesn't store your IP address or anything that identifies you. It works out approximate country and device type, and counts unique visits using a value that isn't linked to you and changes over time. We never send it what you searched for, and we strip location details from page addresses before they are counted.
To opt your browser out of analytics, visit www.insite.ie/?no-track. To opt back in, visit /?track. This choice is saved only in your browser (see section 4).
Emails you send us
If you email us, we use your email address and message to reply, and keep the correspondence only as long as needed to deal with it.
3. Who we share it with
We don't sell personal data or use it for advertising. To provide InSite, some information has to go to the service providers below.
| Provider | What they receive | Why |
|---|---|---|
| Railway (hosting; servers in the EU, Netherlands) | All requests to InSite, including your IP address and server logs | Running the website |
| Google (Geocoding API) | The address or Eircode you search for | Finding the location |
| Autoaddress | The address or Eircode you search for | Matching Irish addresses |
| OpenStreetMap Foundation (Nominatim) | The text you search for, or the point you drop on the map | Backup address lookup, and naming a dropped pin |
| Public data providers (e.g. GSI, EPA, Tailte Éireann, National Monuments Service, NPWS, OPW, local authorities, CSO, ComReg, EirGrid, GBIF, OpenStreetMap) | The location or plot outline being looked up, sent from our server (not your IP address) | Building the report |
| Map and code providers your browser connects to directly: OpenStreetMap (map tiles), Esri (satellite imagery), Geological Survey Ireland (contour map), Cloudflare cdnjs and jsDelivr (website code) | Your IP address and the map area being viewed, as with any website that shows a map | Showing maps and loading the page |
| Umami (analytics; EU) | Anonymous usage information, as described above | Understanding how InSite is used |
Some of these providers are based outside the EU, including Google and Railway in the United States. Where personal data is transferred outside the EU, this relies on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses, as offered by each provider.
We may also disclose information if the law requires it, or to protect InSite, its users or others from fraud or abuse.
4. Cookies and browser storage
InSite sets no cookies. The only thing it saves in your browser is your analytics opt-out choice, if you make one (a setting called umami.disabled in your browser's local storage). It is never sent to us. Clearing your browser's site data removes it. Because of this, InSite doesn't need a cookie consent banner.
5. Our legal basis
We process this information because it is necessary for our legitimate interests (GDPR Article 6(1)(f)): providing the report you've asked for, keeping InSite secure and working, preventing abuse, and understanding in anonymous, aggregate terms how InSite is used so we can improve it. We have kept the data involved to a minimum so that these interests don't override your privacy.
6. How long we keep it
- Searches and plot outlines: not stored beyond the request, apart from appearing in server logs.
- Server logs: up to 30 days.
- Rate-limit counts: minutes to a day, in memory only.
- Analytics: anonymous, aggregate statistics only.
- Emails: as long as needed to deal with your message.
7. Your rights
Under data protection law you have the right to access, correct or erase personal data we hold about you, to restrict or object to how we process it, and to data portability where it applies. Because InSite has no accounts and keeps very little, there will often be nothing we can link to you. Contact us at rob@attuned.ie and we'll respond within one month.
If you're unhappy with how we've handled your data, you can complain to the Data Protection Commission, Ireland's data protection authority.
8. Children
InSite is a professional tool and isn't aimed at children.
9. Changes to this policy
We may update this policy, for example if InSite adds features such as accounts. The date at the top shows when it last changed.