Add support for GDPR-friendly openstreetmap.de

Created on 24 May 2024, 6 months ago
Updated 28 June 2024, 5 months ago

Problem/Motivation

openstreetmap.org is great as a tile provider, but it is hosted in Canada or USA, and it also uses Fastly.net as CDN.

This is problematic for privacy reasons, since the user IP is shared with a third-party. Also, this conflicts with EU's GDPR data protection law:

[...] The GDPR basically says, that as a website operator you may not give personal data to third parties, without the (preceding) consent of the user. Also, you need to have a data processing contract with each company that is involved in the processing of user data, e.g. your hosting company.

What is problematic about the leaflet module, is that the user IP address is given to the map server operator. The IP address is personal data. Also the openstreetmap operator is located outside the EU which makes it more delicate.

Quote from @anruether in ✨ Use Leaflet GDPR conform Active .

Steps to reproduce

Use openstreetmap tiles, and see that domains in Canada and USA are contacted, openstreetmap.org and fastly.net.

Proposed resolution

Add support for the German fork of the Standard tile layer at openstreetmap.de. Label in German and local language (transliterated where no name in Latin script is available), commercial and high-traffic use restricted.

From https://wiki.openstreetmap.org/wiki/Raster_tile_providers

Hosted in Germany: https://check-host.net/ip-info?host=openstreetmap.de

Remaining tasks

User interface changes

API changes

Data model changes

✨ Feature request
Status

Fixed

Version

2.2

Component

Code

Created by

🇩🇰Denmark ressa Copenhagen

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Merge Requests

Comments & Activities

Production build 0.71.5 2024