Privacy Policy
Last updated: 15 October 2026.
In short. fuel-prices.eu shows public fuel price data. You do not need an account to use it. We do not sell personal data.
The site does use cookies and similar technologies: some remember your choices (theme, currency), some measure how the site is used (our own counter and Google Analytics, both only after you agree where the law requires it), and some display advertising (Google AdSense, on some pages). The tables below list every item we found, what it does and how long it lasts.
- Who we are
- What we collect
- Cookies and local storage
- Your cookie choices
- Other companies involved
- Transfers outside the EEA
- Your rights
- Children
- Changes
- Contact
Who we are
The controller responsible for your data is fuel-prices.eu, contactable at hi@fuel-prices.eu. The site is hosted on a virtual server from netcup, in a European data centre.
For anything about your data, write to that address. We aim to answer within 30 days.
What we collect, why, and for how long
Legal bases are those of the GDPR (Regulation (EU) 2016/679): consent (Art. 6(1)(a)), performance of the service you ask for (Art. 6(1)(b)) and our legitimate interest (Art. 6(1)(f)).
| What | Data | Why and legal basis | How long |
|---|---|---|---|
| Server logs | IP address, time, page requested, browser and device string (user agent), referring page. | Keeping the site running and secure, blocking abuse and scraping. Legitimate interest. | Raw logs for at most 30 days, then only daily totals without IP addresses. Temporary IP blocks against abuse last from one hour up to 24 hours. |
| Visit statistics (our own counter) | Pages viewed (address without the part after ?), language, device type (mobile, desktop, tablet or bot), clicks on links and buttons, time the page was visible, how far you scrolled, searches started, and how quickly the page reacted to clicks and taps. A random code in a cookie and a session code in the browser tie the events of one visit together. Your IP address is not stored in this counter; the server only uses it at that moment to tell people from automated visitors. |
Understanding which pages are useful and improving the site. In the European Economic Area, the United Kingdom and Switzerland the legal basis is consent (Art. 6(1)(a)), and the counter starts only after you press Consent in the cookie banner, together with Google Analytics. Elsewhere there is no banner and it starts on arrival, like Google Analytics. You can also switch it off (see Your cookie choices). | Random code: up to 180 days in your browser, deleted when you withdraw consent. Recorded events: 12 months, then deleted automatically. |
| Search (the /search/ page) | The text you typed (up to 120 characters), what we understood from it (country, town, fuel), language, time, whether it looks like a person or a bot, and a short pseudonymous code made from your IP address and browser string with a secret key. The IP address itself is not stored here. | Answering the search and finding questions we answer badly. Legitimate interest. Please do not type personal data into the search box. | 12 months, then deleted automatically. |
| Google Analytics 4 | Page views and interactions, approximate location from the IP address, device and browser information, cookie identifiers. | Measuring audience. Consent (Art. 6(1)(a)) in the European Economic Area (which includes Norway, Iceland and Liechtenstein), the United Kingdom and Switzerland, where it starts only after you press Consent. Outside those countries there is no banner and it starts on arrival. | Cookies up to 400 days (browsers do not keep them longer). Google keeps the data under its own policies and the settings of our account. |
| Advertising (Google AdSense) | Ad requests, cookie identifiers, IP address and device data are processed by Google and its advertising partners to show and measure ads, and to prevent fraud. | Paying for the site. Consent for advertising cookies and personalised ads. Where a banner is required, the consent state sent to Google is "denied" until you choose; Google may then still show ads that do not use cookies to personalise them. | Cookies from 1 day to about 13 months (see the table of cookies). We do not receive the data Google collects, only reports. |
| Newsletter | Your email address, country, the fuels, countries and units you chose, and the proof of your consent: the wording shown, the time, your IP address (at sign-up and at confirmation) and browser string. | Sending the newsletter you asked for. Consent, confirmed by a double opt-in email. | Sign-ups you never confirm are deleted after 14 days. When you unsubscribe, your subscriber record is deleted at once. We keep only anonymous daily counts. The emails are sent through the email provider Resend. |
| Bug report | What you wrote, the page address, your browser string and screen size, your IP address, and an email address and screenshot only if you add them. | Fixing the problem you report and answering you. Legitimate interest. Reports arrive by email at the operator. | 12 months from the date the report was sent, then deleted automatically together with any screenshot. Write to us to have a report deleted sooner. |
| Press and research contact form | Name, email, outlet, message, page, and your IP address, network and browser string. | Answering your message and preventing spam. Legitimate interest. | IP address, network and browser string are erased after 90 days. The message and email remain so that we can reply. |
| Web push alertson town pages in Romania and France | The address your browser gives us for notifications and its keys, the country and town page, language, browser string, and a one-way hash of your IP address used to limit repeated sign-ups. | Sending the price alerts you ask for. Consent, given in your browser's own permission prompt. | Until you turn the alerts off. If your browser stops accepting them, the subscription is deactivated automatically. |
| Embedded charts | When another website embeds one of our charts: that website's address, the type of chart and a visit count. No visitor data. | Knowing where our charts are used. Legitimate interest. | 90 days. |
| Libraries, maps | Your browser contacts other companies to load code libraries, flag images and map tiles, and so sends them your IP address and browser details. The site's fonts are served from our own server; only the Google consent message loads its own fonts from Google. One panel on the home page asks api.country.is for the country of your IP address. | Showing the page. Legitimate interest. The companies are listed under Other companies involved. | Decided by each company; we do not receive this data. |
| Telegram bot | See the section below. | See the section below. | See the section below. |
Telegram bot (@FuelPricesEU_bot)
The bot is optional. It only knows about you if you open it in Telegram and press Start.
- What it stores: your Telegram chat number, your language and currency settings, the alerts and weekly summaries you set up (country, fuel, price level, day; for an alert near you, the point is rounded to about 1 km, with the radius), and the messages queued for you as a record of delivery.
- Conversation log under a pseudonym: your messages to the bot, its replies and your thumbs up or down are filed under a code derived from your chat number with a secret key, not under the chat number itself. If you share a location, the log keeps only the nearest town, never the coordinates.
- What it does not store: your name, Telegram username, phone number, profile photo or contacts.
- Why: to give you the alerts, summaries and answers you ask for (Art. 6(1)(b)). The pseudonymous log is used to improve the bot and the site search (legitimate interest, Art. 6(1)(f)).
- How long: the conversation log is deleted after 90 days and only daily counts without text remain. Settings, alerts, summaries and queued messages are kept until you delete them.
- Your controls:
/stoppauses all alerts and summaries./deleteasks for confirmation and then erases all your data, including the conversation log./privacyshows a short version inside Telegram.
Messages travel through Telegram, which has its own privacy policy.
Cookies and local storage
Before you make a choice in the cookie banner, we found only these items on our pages: the consent manager's own cookie, the language cookie on translated pages and the local storage entries marked "first-party" below. Our visit counter starts, and analytics and advertising cookies are set, after you consent, or on arrival if you are outside the countries where a banner is required.
| Name | Who sets it | What it is for | How long |
|---|---|---|---|
FCCDCF, FCNEC | Google consent manager, on our domain | Remember your choice in the cookie banner. | About 13 months (FCNEC: 12 months) |
cur_pref | First-party | Remember the currency you picked. | 12 months |
fp_lang | First-party | Remember the language you picked on translated pages. | 12 months |
fpl | First-party, our visit counter | A random code that lets the counter recognise a returning browser and helps it tell people from automated visitors. | 180 days; set only after consent where a banner is shown, deleted when you withdraw it |
fp_learn_sid, fp_learn_last (session storage) | First-party | Session code and time of the last activity for the visit counter. | Until you close the tab; only after consent where a banner is shown |
fp_learn_optout (cookie and local storage) | First-party | Remembers that you switched our visit counter off. | 400 days |
fpTheme, theme (local storage) | First-party | Remember dark or light display. | Until you clear site data |
fp_currency, fp_hub_cur, cc_lang (local storage) | First-party | Remember the currency and language you picked. | Until you clear site data |
fp_fab_seen, fpAnchorH (local storage) | First-party | Remember that a help button was already shown to you, and the height of the ad bar at the bottom of the screen so that the page does not jump. | Until you clear site data |
fp_ads_u, fp_ads_arm (local storage) | First-party | A random number kept in your browser that decides which ad layout test group you are in. | Until you clear site data |
_ga, _ga_VF34H6FF1C | Google Analytics, on our domain | Tell visitors apart and count visits. | Up to 400 days; set only after consent where a banner is shown |
__gads, __gpi, __eoi, IDE, DSID, test_cookie and other advertising cookies | Google and its advertising partners | Show and measure ads, limit how often you see an ad, prevent fraud. The partners' names change from one ad to the next; in our checks they included Yahoo, LinkedIn, Simpli.fi, Mediago, Moloco, Bidtheatre and Blis. | From 1 day to about 13 months; set only after consent where a banner is shown |
Cookies from Google and its partners are controlled by those companies; the list above is what appeared in our own tests and may change. Your browser also keeps ordinary technical copies of our files (cache); we do not read them.
Your cookie choices
Where the law requires it (the European Economic Area, the United Kingdom and Switzerland), Google Analytics, our own visit counter and advertising cookies stay off unless you press Consent. You can change your mind at any time; if you withdraw consent, the visit counter stops and its cookie is deleted:
This button opens Google's consent message again. Ad blockers can prevent it from opening; in that case clear the cookies of this site in your browser, which resets the choice.
To switch off our own visit counter in this browser, open this page; to switch it on again, use this one.
You can also block or delete cookies in your browser settings, and for personalised advertising from many companies at youronlinechoices.com.
Other companies involved
These companies receive at least your IP address and browser details when your browser contacts them, because they deliver part of the page or a feature. Their own policies apply to what they do with it.
| Company | What for | When |
|---|---|---|
| Google (Funding Choices consent message, Analytics, AdSense) | The cookie banner, audience measurement, advertising. Google privacy policy | The consent message loads on arrival; while it is shown, it loads its own fonts from Google. Analytics and advertising cookies follow your consent where required. |
| netcup | Hosting of the servers where the site and its databases run. | Always. |
| Resend | Sending newsletter and confirmation emails. | Only if you subscribe. |
| Telegram | Delivering bot messages. Telegram privacy policy | Only if you use the bot. |
| OpenStreetMap, Carto | Map tiles. Address search (Nominatim) and route calculation (OpenStreetMap Germany routing) on the pages that offer them. | On pages with a map, search by address or a route. |
| Cloudflare cdnjs, jsDelivr, unpkg, flagcdn, api.country.is | Code libraries and flag images served from their networks. The home page asks api.country.is which country your IP address is in, for the traveller panel. | On the pages that use them. |
We do not use Facebook Pixel or other social tracking pixels.
Transfers outside the EEA
Google and some of the companies above are based in or use servers in the United States and other countries. Where personal data leaves the European Economic Area, the transfer relies on the safeguards those companies provide, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. See their policies for details.
Your rights
Under the GDPR you can ask us for access to your data, correction, erasure, restriction, a portable copy, and you can object to processing based on legitimate interest. Where processing rests on consent you can withdraw it at any time (see Your cookie choices); withdrawal does not affect what happened before.
Write to hi@fuel-prices.eu. Some data is stored under codes that we cannot link to you without more information (for example the visit counter or pseudonymous logs); to find your records, we may ask you for the code stored in your browser or the text you typed. Newsletter subscribers can unsubscribe with the link in every email, and Telegram users can use /delete.
You may complain to a data protection authority, in particular in the country where you live or work. fuel-prices.eu is operated from Romania, whose authority is ANSPDCP. A list of authorities in the EU is on the European Data Protection Board website.
Children
The site is not aimed at children under 16, and apart from the technical data described above, which is collected from every visitor, we do not knowingly collect their data. If you think a child has sent us personal data, write to us and we will delete it.
Changes to this policy
When what we do with data changes, we update this page and the date at the top. For a material change we will say so on the home page.
Contact
Privacy questions and requests: hi@fuel-prices.eu.