Privacy policy

Last updated: October 2026. This is a translation; the German version is authoritative.

1. Controller

FeeFreeATM is a private, non-commercial project with no advertising and no affiliate links. The controller is the private operator based in Liechtenstein, reachable at: contact@feefreeatm.com

As Liechtenstein is part of the European Economic Area, the General Data Protection Regulation (GDPR) applies.

2. In short

3. Hosting (Netlify)

The website is hosted by Netlify, Inc. (San Francisco, USA). When you visit, Netlify processes technically necessary data such as IP address, date and time, page requested, referrer and browser type in order to deliver the site and protect it against attacks. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation). Processing is based on Netlify's Data Processing Agreement, which forms part of Netlify's terms of service. Transfers to the USA are based on the EU Commission's Standard Contractual Clauses contained therein.

4. Map tiles (OpenStreetMap)

The street map consists of image tiles that your browser loads directly from the servers of the OpenStreetMap Foundation (St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom). Your IP address, the map area shown and browser information are transmitted to the OpenStreetMap Foundation. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a usable map). There is an EU Commission adequacy decision for the United Kingdom. More information: OpenStreetMap Foundation privacy policy.

5. Location

If you tap “use my location”, your browser asks for permission. The coordinates are used only in your browser to find nearby ATMs and are not sent to me.

6. Place search (Photon by komoot)

When you type a city or address into the search field, your browser sends the text you entered, the approximate current map area and your IP address to the Photon search service of komoot GmbH (Germany), which is based on OpenStreetMap data. This happens only while you type. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a working place search). Do not enter data in the search field that you do not want to transmit.

7. Exchange rates (Frankfurter)

To keep currency conversions up to date, your browser fetches the European Central Bank's reference rates via the free open-source service Frankfurter (api.frankfurter.dev) at most every twelve hours when you open the map. Your IP address and usual browser information are transmitted to this service; no information about you or your search is sent. The result is stored in your browser's local storage for twelve hours. If the service is unavailable, the site uses the rates stored at the last update. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in up-to-date conversions).

8. Reporting a fee and contact by email

The site has no form. If you tap “report fee by email”, your email program opens with a pre-filled message (ATM, amount, country of your card). It is sent only if you send the email yourself. Emails to contact@feefreeatm.com are forwarded to my mailbox via Cloudflare Email Routing (Cloudflare, Inc., USA). I use your email address and the content only to process the report or answer your request, and delete them after twelve months at the latest. The legal basis is Art. 6(1)(f) GDPR. Transfers to the USA are based on the EU-US Data Privacy Framework or Standard Contractual Clauses.

9. Local storage in the browser

The site remembers the last place you selected and the most recently fetched exchange rates in your browser's local storage (localStorage). This information does not leave your device. You can delete it at any time in your browser settings. This site does not set cookies.

10. External links

The country pages (e.g. “Fee-free ATMs in Portugal”) do not load any content from third parties. Links to Google Maps, OpenStreetMap, sources and map providers open the provider's site only when you click them. The provider's privacy policy applies there.

11. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests. Just send me an email. You can also lodge a complaint with a supervisory authority; in Liechtenstein this is the Datenschutzstelle Liechtenstein.