Privacy Policy

Last updated: 11 September 2026

_Amended 11 September 2026: added private maps, which are shown to no one but their owner._

This policy is written to be read, not to be survived. It says specifically what we collect, exactly why, and what we never do with it.

The short version

We collect your email address, your IP address, and information about what you upload. We collect these for four reasons: to run your account, to enforce bans, to answer copyright takedown notices, and to meet our legal obligation to report child sexual abuse material. We also count page views in an anonymous, aggregate way.

We do not sell your data. We do not run advertising. We do not share your data with anyone except where the law requires it.

What we collect, and why each item exists

Your email address

Collected when: you create an account.
Why: to verify you are a real person, to let you sign in and reset your password, to notify you if someone reports one of your maps, and to identify your account if it is banned.

Your IP address

Collected when: you sign up, when you sign in, and when you upload a map.
Why: this one deserves a real explanation, because it is the most sensitive thing here. 1. Ban enforcement. This site has a one-strike permanent ban for copyright infringement. A ban on an email address alone is trivially evaded by making a new one. Recording the IP addresses associated with an account is what makes the ban mean anything. 2. DMCA notices. A valid takedown notice may require us to identify the person responsible for an upload. 3. The CSAM reporting obligation. If a confirmed match occurs, we are legally required to report it to NCMEC, and that report requires identifying information about the uploader.

We do not use IP addresses to build a profile of you, to target anything at you, or to track you across other sites.

What you upload

Collected when: you upload a map.
Why: it is the map. We store the image file, the title, description, tags, grid size, licence, AI/Handcrafted tag, dimensions, and the date. For a map you share, all of it is displayed publicly, which is the point. For a map you keep private, none of it is shown to anyone but you.
We strip embedded metadata (EXIF and similar) from images before storing them. Photographs and some exported images can carry GPS coordinates, camera serial numbers, and timestamps. We remove that so it is not published along with your map.

Ordinary server logs

Collected when: you use the site at all.
Why: logs are generated by the act of serving a web page — requests, timestamps, error traces. We use them to keep the site working and to investigate abuse.

Aggregate analytics

What: counts of page views and downloads.
How: self-hosted and privacy-respecting. No third-party advertising or tracking scripts run on this site, and we do not use cookies to follow you between sites.
Why: to know which maps are useful and whether the site is working. It is counting, not profiling.

What we do not do

We do not sell your data. Not to anyone, not in aggregate, not "anonymised".
We do not run advertising, and there are no ad-tech trackers anywhere on this site.
We do not share your data with third parties, with two exceptions, both legal obligations: 1. A report to NCMEC where confirmed child sexual abuse material has been detected. 2. A response to valid legal process — a subpoena, a court order, or a properly formed DMCA notice that requires identifying an uploader.
We do not use your uploads to train AI models, and we do not license them to anyone for that purpose. What happens to your map is governed by the licence you chose, and by nothing we do.

Service providers

We do not sell or share your data, but running the site means a few companies necessarily handle it:

Supabase — hosts the database and account authentication.
Cloudflare (R2) — stores the image files.
Netlify — serves the website.
A transactional email provider — sends verification and notification emails.

Each processes data only to provide that service to us. Their own privacy terms apply to them.

How long we keep things

Account data: until you delete your account.
Uploads: until you remove them or delete your account. Private maps are always deleted when you delete your account.
Ban records (email and IP): permanently. A permanent ban that expires is not a permanent ban.
IP logs for accounts in good standing: retained while the account exists, since a copyright claim can arrive long after an upload.
Server logs: a short rolling window, then discarded.
CSAM case records: retained as required by law.

Deleting your account

You may delete your account at any time from your account settings. We confirm by email first.

We remove your email address and authentication record. You choose whether your uploads are removed or kept anonymously under a "deleted user" handle.

Two things survive deletion, and you should know this before you start:

Licences you granted remain in force. Anyone who downloaded your map keeps the rights you gave them, permanently. Deleting your account does not revoke a Creative Commons licence — nothing can.
Ban records survive. If your account was banned, deleting it does not clear the ban.

Children

This site is not intended for anyone under 13, and you must affirm you are 13 or older to create an account. We do not knowingly collect information from children under 13. If we learn we have, we delete the account and its data.

Cookies

We use a session cookie to keep you signed in. That is it. No advertising cookies, no cross-site tracking cookies, no third-party pixels.

Your choices

You can browse and download without an account, in which case we hold no email address for you.
You can delete your account at any time.
You can ask what we hold about you, and we will tell you.

Changes

If we change this policy in a way that affects what we collect or why, we will say so on the site rather than quietly editing this page.

Contact

Use the contact form on the site for privacy questions. For copyright matters specifically, use the contact details on the Copyright / DMCA page.