PlugAtlas
Privacy policy
Last updated: 4 November 2026
This policy explains what data PlugAtlas collects, how it is used and what your rights are. It applies to the website www.plugatlas.gr and to the PlugAtlas app for Android, which shows the same website.
1. Who is responsible
The controller of your personal data is Stelios Samaras.
Contact email: [email protected]
2. Data we collect
Your account
- Email address and password, if you register with email. The password is stored only as a secure hash, never in readable form.
- Sign-in with Google, Microsoft, Facebook or Apple: we receive your email address, your name and an account identifier from the provider. We never receive your password for that provider.
- Your display name and the date the account was created.
Your vehicles
- The vehicles you save: manufacturer, model, optionally the licence plate and the claimed range, and which vehicle is active.
Location
- With your permission, the app and your browser use your device's precise location only while you are using it, to show your position on the map and for turn-by-turn navigation. Your location is not stored on our servers and is never used in the background.
- When you ask for a route, the start and destination coordinates are sent to the routing service (see section 4).
- You can refuse or withdraw location permission at any time in your device settings; the map still works without it.
Technical data
- Like any website, our server records technical information (IP address, date and time, page requested, browser type) for security and troubleshooting.
3. How we use your data
- To create and manage your account and sign you in (performance of a contract, Art. 6(1)(b) GDPR).
- To show you charging stations, prices and routes for your vehicle (performance of a contract).
- To send password-reset or email-change messages, only when you request them.
- To keep the service secure and prevent abuse (legitimate interest, Art. 6(1)(f) GDPR).
We do not sell your data, we show no advertising and we use no third-party analytics or tracking tools.
4. Third-party services
To make the map work, your device connects directly to the following services, which receive your IP address:
- OpenStreetMap (map images) – privacy policy
- OSRM / Project OSRM (route calculation – receives the route coordinates)
- unpkg.com (loads the Leaflet map library)
- Google, Microsoft, Facebook, Apple, only if you choose to sign in with them; their own privacy policies apply.
- Google Maps, only if you choose "Open in Google Maps" for directions.
- Our email provider, to deliver the account emails you request.
Charging station data comes from the open data of Greece's national electromobility registry (electrokinisi.yme.gov.gr). No user data is sent there.
5. Cookies and local storage
We only use essential cookies:
- a sign-in cookie that keeps you logged in (up to 14 days),
- a language cookie that remembers whether you chose English or Greek,
- a security (anti-forgery) cookie that protects forms.
Your device also remembers whether you muted voice guidance. We use no advertising or tracking cookies.
6. Retention and account deletion
We keep your account data and vehicles for as long as your account exists. Server logs are deleted automatically after a short period.
You can delete your account at any time, in the app or on the website: Account → Delete account. This permanently removes your account, its links to Google/Microsoft/Facebook/Apple and all saved vehicles. If you cannot sign in, email [email protected] from your account's email address and we will delete it within 30 days.
7. Security
All communication is encrypted with HTTPS. Passwords are stored only as hashes and access to the database is restricted.
8. Your rights
Under the General Data Protection Regulation (GDPR) you have the right to access, correct, delete, restrict and port your data, and to object to its processing. You can correct or delete most data directly in your account; for anything else, write to [email protected].
You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
9. Children
PlugAtlas is not directed at children under 15 and we do not knowingly collect their data.
10. Changes
If we change this policy, we will publish the new version on this page with a new "last updated" date. We will tell you in the app about significant changes.