Privacy policy · OctaFuel

OctaFuel (“the app”, “we”, “us”) is a free mobile app that shows fuel prices in the 27 countries of the European Union and in Iceland, using data from official public sources: the price at each station where it is published, and an official maximum, uniform or average price elsewhere. This policy explains what information the app and this website use, why, who receives it, and the choices you have.

In short

You don’t need an account, and we never ask for your name, email or phone number.
We use your location only to find stations near you and to plan routes. We don’t store it or link it to you.
Your favourites, alerts and settings stay on your phone.
Ads from our partner Adsterra appear only if you agree (and, on iPhone, also allow tracking), and you can change your mind at any time under Privacy & ads in the app.
If you report an ad, we store only the report itself, with nothing that identifies you.
This website (octafuel.pt) uses no analytics. Its fuel price pages show ads from Adsterra to every visitor, inside isolated frames. You can block or delete cookies in your browser settings, or use an ad blocker.

Who is responsible

The data controller is Carlos Rodrigues, an individual developer based in Portugal.

Email: contacto@octafuel.pt

Information the app uses

Your location

If you allow it, the app reads your device’s location while you are using it. It never tracks your location in the background. Location is used to:

Find nearby stations and show them on the map. Your coordinates are sent over an encrypted connection (HTTPS) to the OctaFuel server, which returns the stations around that point. The server uses the coordinates only to answer that request. It does not save them, and it doesn’t link them to you or to your device. Our hosting provider keeps technical logs, such as the IP address and time of a request, for 1 day, for security and operations.
Fall back to official sources. If the OctaFuel server is unavailable, the app asks some official data services directly (for Portugal, Spain, France, Italy, Slovenia and Croatia only). For France, Italy and Slovenia, the app sends the coordinates of the search area to that country’s official service to get stations within a radius: data.economie.gouv.fr (French government open data), carburanti.mise.gov.it (Italian Ministry of Enterprises and Made in Italy) and goriva.si (Slovenian Ministry of the Economy). For Portugal and Spain, the app only requests the municipality or province, which it works out on your phone. For Croatia, it downloads the national price list from mzoe-gor.hr without sending your location. There is no such fallback for other countries.
Show your town name (“Current location · Lisboa”). This uses your phone’s built-in geocoding service (Apple on iPhone, Google on Android). In the Route tab it may also use Photon, a place-search service run by komoot GmbH (Germany).

Maps. On iPhone, maps are drawn by Apple Maps. On Android they are drawn by the Google Maps SDK, which collects device details (model, operating-system version), your IP address, a pseudonymous identifier generated by the SDK, crash reports, and how you move and zoom the map. Google uses this to run and improve its services, under the Google Privacy Policy. The app doesn’t turn on the map’s own “my location” layer.

If you don’t allow location access, the app still works. It shows Lisbon by default, and you can move the map anywhere.

Route planning

When you plan a route, the places you type in the From and To fields and the coordinates of your start and end points go to our routing and place-search providers to calculate the driving route. These providers are Photon by komoot GmbH (Germany) and the public demo routing server of the open-source OSRM project (router.project-osrm.org); the OSRM project does not publish where that server is located. Both use OpenStreetMap data. The app then asks the OctaFuel server for stations along that route, as described above. We don’t keep a history of your routes on any server.

Information stored only on your phone

The following are stored locally on your device, and are never sent to us: favourite stations; price alerts (fuel, target price, radius); vehicle settings (consumption, refuel interval, tank size); language and display preferences; a local history of prices you have seen; and your ad-consent choice. Deleting the app deletes all of this.

Price alerts are checked on your phone whenever the app refreshes prices. When a station matches, the app shows it to you in the app and may show a local notification. We don’t use push notifications, and we keep no notification token.

OctaFuel is free thanks to ads from Adsterra (AD MARKET LIMITED, Christaki Kranou 49, Germasogeia, 4041 Limassol, Cyprus).

Consent comes first. The first time an ad space appears, the app asks whether you allow ads. If you choose “No thanks”, no ad code is loaded and no ads are shown. The app works exactly the same either way.
Apple’s tracking prompt. On iPhone, after you allow ads the app shows Apple’s App Tracking Transparency prompt. Ads load only if you allow ads and allow tracking. If you choose “Ask App Not to Track”, no ad code is loaded and the app works the same.
Private ad view. Ads run in a separate private (“incognito”) web view. It doesn’t share cookies or storage with the rest of the app, and what the ad code stores there is not kept on your phone after the ad view closes.
What Adsterra receives when ads are shown. Adsterra’s ad code runs in a small embedded web view and may receive or use your IP address and an approximate location derived from it; device, operating-system and browser details; cookies or similar identifiers; and which ads were shown or tapped. Adsterra uses this to deliver and measure ads, cap how often you see them, and prevent fraud, and may combine it with information from other apps and websites. Adsterra is an independent controller of this data under its own privacy policy, which says cookie-related data is generally kept for no more than one year.
Ad taps open in your phone’s web browser, outside the app.
Changing your choice. You can withdraw or change your ad consent at any time in the app: open the Alerts tab and tap Privacy & ads. Withdrawing is as easy as agreeing: turn ads off and they stop loading straight away. On iPhone you can also turn off tracking for OctaFuel, or “Allow Apps to Request to Track”, in Settings → Privacy & Security → Tracking.
Hiding or reporting ads. You can hide any ad space with the × button, and report an inappropriate ad with “Report this ad” in the ⋯ menu next to “Sponsored” (or by email at contacto@octafuel.pt). The same menu has “Why am I seeing this ad?”, which explains what information may have been used to choose the ad.
What we don’t pass on. Apart from what Adsterra’s code receives directly, we give Adsterra nothing: not your location coordinates, favourites, alerts, or anything else that identifies you. We do not use the device advertising identifier (IDFA/AAID).

Ad reports

When you report an ad, the app sends one report to the OctaFuel server, where it is stored so that we can review it and block unsuitable ad categories with Adsterra. A report contains only: where the ad was shown in the app and the ad format; the reason you chose (inappropriate, misleading, adult, gambling or other); the platform (iPhone or Android), the app version and the app’s language; and the time of the report. It contains no name, account, device identifier, advertising ID, location or free text, and the app cannot read reports back. We keep reports for 12 months and then delete them.

What we do not collect

OctaFuel has no accounts and no analytics or crash-reporting tools of its own. On Android, the Google Maps SDK collects its own diagnostics (see “Maps” above). The app has no access to your contacts, photos, microphone or camera. It does not collect your name, email, phone number or payment information, and it has no in-app purchases.

This website

octafuel.pt is a static website with no accounts and no analytics. We set no cookies of our own. The fuel price pages use a few third-party services, and show ads to every visitor; both are described in the next section. Like any web server, our hosting provider (Vercel Inc.) processes your IP address and basic request data to deliver the pages and protect the service, and keeps technical logs (IP address, time) for about 1 hour. If you email us, we use your message only to reply.

Website: ads, cookies and third parties

The fuel price pages of this website (/en/prices and the page for each country) have an interactive map, a place search and ads. The other pages show no ads.

Ads on the price pages

Ads for every visitor. We show ads on the price pages to fund the free service. They appear to every visitor, without a consent banner, and load when the page opens. When ads are shown, Adsterra may set cookies or similar identifiers in your browser.
Isolated frames. Ads from Adsterra (AD MARKET LIMITED, Christaki Kranou 49, Germasogeia, 4041 Limassol, Cyprus) run inside isolated (sandboxed) frames. The ad code in these frames cannot read the rest of the page, its storage or its cookies, and cannot redirect the page. Ads are never placed over the map, and we don’t use pop-up, pop-under or full-screen ad formats. An ad you click opens in a new tab.
What Adsterra receives when ads are shown. Adsterra’s ad code and servers may receive or use your IP address and an approximate location derived from it; device, operating-system and browser details (such as browser type, language and screen size); cookies or similar identifiers stored in your browser; the name of this website; and which ads were shown or clicked. Adsterra uses this to deliver and measure ads, cap how often you see them, and prevent fraud, and may combine it with information from other websites. Adsterra is an independent third party and controller of this data under its own privacy policy, which says cookie-related data is generally kept for no more than one year.
What we don’t pass on. Apart from what Adsterra’s code receives directly, we give Adsterra nothing: not your location, your place searches, or anything else about you.
Your choices. You can block or delete cookies, including third-party cookies, in your browser settings, or use an ad blocker; the price pages work the same without ads. Cookies Adsterra has already set stay in your browser until they expire or you delete them.

Map, place search and “Near me”

Map. The map is drawn with tiles, fonts and icons from OpenFreeMap (openfreemap.org), a free map service built on OpenStreetMap data. Your browser downloads them directly from OpenFreeMap’s servers, which receive your IP address, basic browser details and which parts of the map are requested, as with any web request. We send OpenFreeMap nothing else.
Place search. When you type in the “Search a place” box, the text you type is sent, while you type, to Photon, a place-search service run by komoot GmbH (Germany), together with your IP address. Nothing is sent until you start typing. Komoot processes this under its own privacy policy.
Live prices in Germany. When you view Germany on the map at station level, your browser asks Tankerkönig (creativecommons.tankerkoenig.de), which publishes the official MTS-K data, for stations around the map centre. Tankerkönig receives that map position (rounded to a 10 km grid), the search radius and your IP address. At most one such request is made per minute, and only after you move the map.
“Near me”. Your browser asks for your location only when you tap Near me, and only if you allow it. Your coordinates are sent over an encrypted connection (HTTPS) only to the OctaFuel database API (Supabase, EU region, Ireland), which returns the stations around that point. The coordinates are used only to answer that request: they are not stored, not linked to you, and not shared with Adsterra or anyone else.
Price data. To show prices, the pages request public price data from the same OctaFuel database API, which receives your IP address and the map area you are viewing. Our hosting provider keeps technical logs (IP address, time) for 1 day, for security and operations.
Legal basis. The map, place search and “Near me” are part of the service you ask for (Art. 6(1)(b) GDPR); “Near me” works only after you allow location access in your browser. Technical logs rely on our legitimate interest in keeping the service secure and running (Art. 6(1)(f)).

Service providers and recipients

Recipient	Role	What it receives
Supabase, Inc. (OctaFuel server hosting)	Processor for us	Coordinates of station searches in the app and of “Near me” on this website (used only to answer the request, not stored); map areas viewed on this website; ad reports; technical request logs (IP address, time). EU region (Ireland)
Vercel Inc. (website hosting)	Processor for us	IP address and request data when you visit this website
komoot GmbH (Photon) and the OSRM routing service	Independent third-party services	Place searches, route and location coordinates, IP address (on this website: Photon only, the text you type and your IP address)
OpenFreeMap (map tiles on this website)	Independent third-party service	IP address and browser request data when the map loads
Official price services: DGEG (PT), MITECO (ES), French Ministry of the Economy (FR), MIMIT (IT), goriva.si (SI), mzoe-gor.hr (HR)	Public data sources, only when the OctaFuel server is unavailable	Station requests (France, Italy, Slovenia: coordinates of the search area; Portugal, Spain: area only; Croatia: no location); IP address
Google (Google Maps SDK, Android only)	Independent controller	Device details, IP address, pseudonymous SDK identifier, crash data, map interactions
Apple / Google	Platform providers	Maps display, place names, navigation hand-off when you tap “Navigate”, local notifications
Adsterra (AD MARKET LIMITED)	Independent controller (in the app, only with your consent; on this website, on the price pages)	See “Advertising” and “Website: ads, cookies and third parties” above

We share user data only with these recipients, and only as described here. Our processors are bound by data processing agreements. The independent recipients process data under their own privacy policies and the GDPR. We do not sell personal data.

Location for finding stations and planning routes: to provide the service you request (Art. 6(1)(b) GDPR), and only after you grant location permission on your device.
Technical logs for security and operation: our legitimate interest in keeping the service secure and running (Art. 6(1)(f)).
Ad reports: our legitimate interest in keeping ads in the app appropriate and meeting app-store rules on ad reporting (Art. 6(1)(f)). Reports contain no identifier.
Map, place search and “Near me” on this website: to provide the service you request (Art. 6(1)(b) GDPR), and “Near me” only after you allow location access in your browser.
Ads in the app, and the cookies or identifiers used for them: your consent (Art. 6(1)(a) GDPR and the ePrivacy rules on device storage). You can withdraw consent at any time; withdrawing does not affect processing that happened before.
Ads on the price pages of this website: we show them to fund the free service; see “Website: ads, cookies and third parties” above.

How long data is kept

OctaFuel server: does not store your coordinates or searches. The hosting provider keeps technical logs (IP address, time) for 1 day, for security and operations.
Ad reports: 12 months from the report, then deleted automatically by a nightly scheduled job.
Data on your phone: kept until you delete it in the app or uninstall the app.
Adsterra: see its policy (generally no more than one year for cookie-related data).

Your rights

Under the GDPR you have the right to access your data and have it corrected or erased; to restrict or object to processing; to data portability; and to withdraw consent at any time.

We don’t keep information that identifies you, so in most cases we hold nothing we can link to you. We will still answer every request: write to contacto@octafuel.pt. For data Adsterra holds, contact Adsterra directly.

You can also complain to a data protection authority, in particular in the EU or EEA country where you live or work, or where you believe the infringement took place. Our lead authority is the CNPD in Portugal (www.cnpd.pt). The European Data Protection Board lists the authorities of every EU and EEA country (www.edpb.europa.eu); in Iceland it is Persónuvernd (www.personuvernd.is).

Children

OctaFuel is meant for drivers and is not directed at children. Children under the age of digital consent in their country (between 13 and 16 in the EU and EEA depending on the country: for example 13 in Portugal, 14 in Spain and Italy, 15 in France and 16 in Germany and the Netherlands) cannot give valid consent to ads themselves. We do not knowingly process data from them. If you believe a child has consented to ads in the app, contact us and we will explain how to withdraw that choice and ask Adsterra to delete any related data.

Security

All connections from the app and to this website use encryption (HTTPS/TLS). The OctaFuel server only lets the app read public price data and add ad reports; the app cannot read, change or delete reports. The server has no user accounts and no table that identifies users.

Price data and accuracy

Prices come from official public sources in each country, the European Commission’s Weekly Oil Bulletin and, for currency conversions, European Central Bank reference rates; the full list is in the terms of use. Some countries show an official maximum, uniform or average price, not station prices. Currency conversions are for comparison only. OctaFuel is independent and not affiliated with or endorsed by any government body. Prices at the pump may differ.

Changes to this policy

If this policy changes, we will update the date at the top. For significant changes, such as a new advertising partner or in-app purchases, we will also tell you in the app.

Contact

Carlos Rodrigues · contacto@octafuel.pt