Privacy
Very little is collected, and this page lists all of it. There is no analytics script, no advertising, and no third-party tracker on any page of this site.
If you never sign in
Nothing about you is stored. No account, no cookie, no record that you were here. The pages you read are not logged against any identifier.
Your browser keeps two small things of its own, and neither leaves your device: whether you last used the flat map or the globe, and nothing else. Those live in your browser's own storage and are readable only by this site, on your machine.
If you do sign in
An account exists so that saved items and corrections have an owner. What is kept is the whole of it:
- Your email address, and a display name if the provider gave one.
- How you signed in — Google, Apple, or an emailed link — as the provider's own identifier for you. No password is stored, because none is set.
- Your session, as a hashed token with the date it was made and last used. The cookie in your browser is that token; the database holds only its hash, so the session table cannot be read back into working cookies.
- What you saved — the addresses of the lives and moments you starred, and when.
- Corrections you sent, with what you wrote and what became of them.
Not kept: IP addresses, user agents, referrers, page views, or any profile of what you looked at.
Cookies
One cookie, and it is your session. It is set when you sign in and cleared when you sign out. Signing in through Google or Apple sets one short-lived cookie to carry the request safely out and back; it is discarded the moment you return. There are no advertising or analytics cookies, because there is no advertising or analytics.
Who else sees anything
Sign-in goes to Google or Apple if you choose them, and an emailed link goes through a mail provider; each sees what it needs to do that job and no more. The map imagery and the web fonts are fetched from their own hosts, which means those hosts see the request your browser makes for them. Nothing about you is sold, rented or shared for advertising, because none of it is collected in the first place.
Deleting it
Ask, through the correction link on any card, and the account and everything attached to it goes. Signing out ends the session immediately.
Changes
If what is collected changes, this page changes with it. It is written from the actual shape of the database rather than from a template, so it can be checked against what the software does.