Privacy policy

In plain words: what we need, where it goes, and what you can ask for.

Last updated: 26 October 2026

1. Who is responsible

FixMyStreets is run by a team of volunteers, who are responsible for the data described here. For any question or request write to [email protected].

2. What we collect

With every report: the place on the map and the address found for it, the category, the answers to the category's questions, the description, the photos and the date.

If you give them: name, email and phone. All are optional; without an email the report is sent anonymously.

With an account: email, name and password (stored only hashed) or, if you sign in with Google, Apple or Microsoft, the identifier and email the provider gives us.

Technical: IP address, browser type and request times in the server logs, for security and fixing faults.

3. Why we use it

• to get the report to the responsible service and show it on the map;
• to send you, if you gave an email, news of the report and the account link;
• for aggregate statistics by municipality and category;
• to protect the service from spam and abuse.

The basis is the service you ask for when you report, our legitimate interest in running the platform safely and, where needed, your consent (e.g. for the device's location). We do not sell data and do no ad targeting.

4. Who receives the report

The report is emailed to the service responsible for the place and the category, usually the municipality or, for some categories, the Hellenic Police. The name, email and phone you gave go with it, so it can reply to you.

Number plates and faces in photos are blurred automatically, on our own server. Only reports to the police also carry the photo with the plate readable, because without it the report cannot be examined.

5. What is public

The map and the report page show the place, the category, the description, the blurred photos, the date and the updates. Email and phone are never shown; your name only if you choose. Reports to the police are not published at all.

Do not write names, number plates or other details of other people in the description.

6. Cookies and browser storage

We use only what the site needs to work; no advertising or analytics cookies.

• a sign-in cookie, while you are signed in;
• a cookie with a random identifier, so your vote (👍/👎) on a report counts once;
• the draft of the report you are writing, only in your browser, so it is not lost if you leave by mistake; it is cleared once the report is sent;
• whatever the Cloudflare Turnstile security check needs.

7. Providers

• Cloudflare: the connection to the site passes through its network, and Turnstile checks you are not a bot before a form is sent.
• Photon (Komoot): when you type an address in the search, we send it only the text you typed, not your IP address or cookies.
• OpenStreetMap / Nominatim: to find the address of a place, our server sends its coordinates, with nothing else.
• MapIt (mySociety): where the municipalities' boundaries come from; none of your data is sent to it.
• Google, Apple, Microsoft: only if you choose to sign in with them.

The map is drawn by our own server, from OpenStreetMap data.

8. How long we keep it

Reports stay, so it shows over time where and how often problems occur. Account details stay as long as the account. Logs are kept only as long as security needs. If you ask for deletion, we remove or anonymise your personal details; what has already been sent to a municipality or the police is then handled by that service.

9. Your rights

You can ask for access to your data, correction, deletion, restriction or portability, and object to processing. Write to [email protected]. From your account you can also hide your name from your reports. If you think we have not respected your rights, you can turn to the Hellenic Data Protection Authority.

10. Changes

When something changes in how the site works, we update this page and its date. See also the Terms of use.