Privacy

What we store

• Account: your name, email address and a salted scrypt hash of your password. We never store the password itself.
• Sessions: a hashed session token, its expiry date and your browser’s user-agent, so you can sign out of other devices.
• Projects: the areas, settings and sections you save, and the place name of each area.
• Export history: file names, formats, sizes and dates of exports from your account. The files themselves are created in your browser and are never uploaded.
• Security records: failed sign-in attempts (email or network address and time) for up to two days, to stop password guessing.
• Email links: when you ask for a password reset or confirm your address, a one-time link is emailed to you. We store only a hash of the link’s token, its expiry (30 minutes for resets, 48 hours for confirmation) and when it was used.
• Imported files: DXF, KML, GeoJSON and shapefiles you import into a saved project are stored with it, compressed, until you remove them or delete the project.
• Server logs: errors and security events, with email addresses masked and no passwords or tokens, kept by our hosting provider for a limited time.

What we don’t do

• No advertising, tracking pixels or third-party analytics.
• No selling or sharing of your data.
• No cookies other than the single sign-in cookie, which is only set when you sign in (see Cookies).

Email

Account emails (address confirmation, password reset, notices that your password or email changed) are sent through an email delivery provider, which receives your email address and the message. We send no newsletters or marketing.

Payments

Paid plans are not on sale yet. When they are, payments will be handled by a payment provider acting as the seller of record; we will receive your plan, its status and renewal date, never your card details.

Third-party services

To show maps and terrain, your browser loads tiles directly from OpenFreeMap, Esri, EOX, NASA, USGS and OpenAerialMap (satellite views), Mapterhorn and Terrain Tiles on AWS, which see your IP address like any website. Place searches and map-layer requests go through our server to Photon, Nominatim and the Overpass API without any information about you.

Your choices

You can change your name, email and password, sign out of other devices, or delete your account at any time from Account settings. Deleting the account removes your projects, imported files and export history immediately. For anything else, see Contact.