Privacy policy

The short version: christmastreefarmsnearby.com sets no cookies, uses no advertising or tracking services and serves its fonts from its own server. Data is only processed when a page is delivered, when you send a review or a tip, and when you switch on the interactive map. We do not sell or share personal information. The details are below.

This site is operated from Germany, so the EU General Data Protection Regulation (GDPR) applies to everything described here, wherever you are.

1. Who is responsible

HYPED, owner Dominic Foerst
Drachenfelsstraße 1, 67240 Bobenheim-Roxheim, Germany
Email: [email protected]

We are not required to appoint a data protection officer. Please send privacy questions to the email address above.

2. Hosting and page delivery

The site is hosted by Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA), which delivers pages through a global server network and protects them from attacks. For every request Cloudflare processes technically necessary data: IP address, time, requested address, amount of data transferred, browser and operating system, and the referring page if your browser sends it.

Legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to offer the site quickly, reliably and securely. We have a data processing agreement with Cloudflare. Cloudflare is certified under the EU-US Data Privacy Framework, so transfers to the US are covered by an adequacy decision of the European Commission (Art. 45 GDPR); the EU standard contractual clauses also apply. See Cloudflare's privacy policy.

3. Reviews

When you rate a farm, we store the stars, your text, the first name or nickname you enter (optional), the time and a shortened check value of your IP address. The check value is derived from IP address, date and a secret key; the IP address cannot be recovered from it. We only use it to detect repeated reviews and abuse. We do not store the IP address itself.

Stars, text, name and date are published. Data is stored in a database at Cloudflare (Cloudflare D1) and, as a backup, in a private code repository at GitHub (GitHub, Inc., USA, also certified under the Data Privacy Framework). Legal basis is Art. 6(1)(f) GDPR: we want to show honest experiences with the farms and protect reviews from spam. A review stays online until you or an operator asks for removal and there are no overriding reasons against it. Email [email protected] for that.

4. Tips about listings

With the suggest a farm form you can tell us about errors or missing farms. We store your text, the topic you chose, your email address if you give one (optional, only for follow-up questions), the time and the IP check value described above. We use this only to improve the listings and answer your request, and delete it once it's handled, after twelve months at the latest. Legal basis is Art. 6(1)(f) GDPR, and Art. 6(1)(b) GDPR for requests about a contract such as a premium listing.

To handle them, we file tips and reviews as tasks on our Trello board (Atlassian, based in Australia and the US, certified under the EU-US Data Privacy Framework). Only the details from the form are transferred, not the IP check value.

5. Spam protection with Cloudflare Turnstile

To keep bots from submitting reviews we may use Cloudflare Turnstile. It only loads once you click into a form. Cloudflare then processes your IP address and browser characteristics to tell people from programs. Turnstile sets no cookies for this. Legal basis is Art. 6(1)(f) GDPR, our interest being protection against spam. See the Turnstile privacy notice.

6. Interactive map

On the map page you can switch on a zoomable map. It only loads after you click “Load map”. We serve the map software (MapLibre) ourselves. Map tiles come from OpenFreeMap (openfreemap.org) and are based on OpenStreetMap data. When loading, OpenFreeMap receives your IP address, the map area shown and information about your browser.

Legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which you give with the click. If you tick “Always load the map”, your browser remembers this in its local storage. The setting stays on your device and is never sent to us. You can withdraw it here at any time:

Stop loading the map automatically

7. Your location

If you tap “Use my location”, your browser asks whether it may share your location. It is only used inside your browser to calculate distances and is never sent to us or anyone else, nor stored.

8. Visitor statistics with Cloudflare Web Analytics

To see which pages are read, we use Cloudflare Web Analytics. It sets no cookies, stores nothing on your device and builds no profiles. It counts page views, referring site, country and type of device and browser, all aggregated. Legal basis is Art. 6(1)(f) GDPR, our interest being a useful website.

9. Links to other services

Each farm page links to the operator's website, to OpenStreetMap and to directions on Google Maps. These services only receive data from you once you click the link; from then on their privacy policies apply.

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). You can withdraw consent at any time with effect for the future. Just email [email protected]. If you are a US resident, you can use the same address for any request about your data; we handle it the same way.

You can also lodge a complaint with a data protection authority, for example the one responsible for us: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz, Hintere Bleiche 34, 55116 Mainz, Germany.

11. Children

The site is not directed at children under 13, and we do not knowingly collect personal information from them. Reviews do not require any personal details.

Last updated: October 2026