Informativa sulla privacy
This policy explains how Pulu maps (waysur.com) collects, uses, and protects personal data when you use this website. Last updated: 14 June 2026.
1. Who we are
The data controller responsible for your personal data is Realloc Ltd, a company registered in Finland. Pulu maps is one of a family of route-planning websites Realloc Ltd operates across several countries. You can contact us about privacy matters at [email protected].
2. What data we collect
2.1 Advertising (Google AdSense and IAB TCF vendors)
We show advertising served by Google AdSense. Google and its certified advertising partners (the "vendors" listed in the IAB Transparency & Consent Framework) may set cookies and read device or advertising identifiers to serve, measure, and (where you consent) personalize ads. In regions where consent is required (the EEA, the UK, and Switzerland), a Google-certified consent management platform (Funding Choices) asks for your choices before personalized ads are served, and you can change or withdraw consent at any time using the "Manage consent" button below.
2.2 First-party analytics
We collect limited first-party usage data to understand how the site is used and to keep it working: pages viewed, anonymous session and visitor identifiers, the approximate country derived from your network (from request headers and your network operator / ASN), and basic device characteristics. This data is collected by our own systems and is used in aggregate; we do not use it to identify you personally.
2.3 Search and geocoding queries
When you search for a place or plan a route, the place names you type are sent to geocoding services (OpenStreetMap Nominatim and Photon) to turn them into map locations, and to a routing service to calculate the route. These queries may include the text you enter. We do not retain these queries for the long term: they are used to return the result you requested and then discarded, aside from short-lived caching that helps the service respond faster and is not linked to you. When you create a shareable route link, the places that make up the route are encoded in the link itself, not stored on our servers.
2.4 On-device storage
To make the site work and to support offline saved routes, we store data on your device: routes you save (in your browser's IndexedDB, under "rm-saved-v1"), short-lived session identifiers (in sessionStorage), and a visitor cookie ("_vs"). This data stays on your device except where it is sent to us as part of the analytics described above.
3. Legal basis for processing
Where the law requires it (for example under the GDPR), we rely on: your consent for advertising cookies/identifiers and any non-essential analytics; our legitimate interests in operating, securing, and improving the service for essential analytics and abuse prevention; and the performance of your request (a contract / pre-contractual step) when we process the place names needed to return directions you asked for.
4. How we use your data
- To provide directions, maps, and route planning you request.
- To save and restore routes on your device.
- To measure and improve site usage and reliability.
- To show advertising that funds the service.
- To detect and prevent abuse, fraud, and automated traffic.
5. Sharing and international transfers
We share data with the service providers needed to run the site: our analytics and hosting infrastructure, the geocoding and routing services named above, and Google and its advertising vendors. Some of these providers (notably advertising vendors) are located outside your country, including in the United States. Where personal data is transferred internationally, it is protected by the safeguards those providers put in place, such as the EU Standard Contractual Clauses and the EU-US Data Privacy Framework. We do not sell your personal data for money.
6. Data retention
We keep personal data only as long as needed for the purposes above. We keep detailed usage data for a limited period and retain only aggregated, anonymized statistics after that. On-device storage stays until you clear it or it expires. Advertising data is retained by Google and its vendors under their own policies.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent at any time (without affecting prior processing). To exercise any of these rights, contact us at [email protected]. You also have the right to lodge a complaint with your local data protection authority.
8. Cookies and on-device storage
| Name | Type | Purpose |
|---|---|---|
| _vs | Cookie | Anonymous visitor measurement. |
| rm-saved-v1 | IndexedDB | Routes you save for offline use. |
| (session ids) | sessionStorage | Short-lived session continuity. |
| Google / TCF vendor cookies | Cookie / identifier | Advertising, measurement, and (with consent) personalization. |
For details of how Google uses information from sites that use its services, see "How Google uses information from sites or apps that use our services". The full list of advertising vendors is available through the consent dialog ("Manage consent" above).
9. Regional notices
United States (CCPA / CPRA)
If you are a resident of California (or another US state with similar laws), you have the right to know what personal information we collect, to request deletion, and to opt out of the "sale" or "sharing" of your personal information. Showing personalized ads may count as "sharing" under these laws. We do not sell your personal information for money; to opt out of personalized advertising, use the "Manage consent" button above, or email us at [email protected]. We do not knowingly sell the personal information of minors.
Brazil (LGPD)
If you are in Brazil, you have the rights granted by the Lei Geral de Protecao de Dados, including access, correction, anonymization, portability, and deletion, and you may contact us about them at [email protected].
South Africa (POPIA)
If you are in South Africa, we process your personal information in accordance with the Protection of Personal Information Act. You may access or correct your information, object to processing, and complain to the Information Regulator. To exercise your rights, contact us at [email protected].
Nigeria (NDPA)
If you are in Nigeria, we process your personal data in accordance with the Nigeria Data Protection Act 2023, including your rights of access, rectification, and erasure. To make a request, contact us at [email protected].
10. Changes to this policy
We may update this policy from time to time. The current version is dated 14 June 2026. Material changes will be reflected here.
11. Contact
For any question about this policy or your personal data, contact Realloc Ltd (Finland) at [email protected].