Privacy Policy
Last updated 2026-07-18. Mapper is a personal, one-person passion project — this is a plain-language description of what actually happens with your data, not a formal legal document.
What we collect
- Your username — chosen at registration, the only account identifier we have (no email, no phone number).
- A passkey credential — a public key generated by your device (Face ID, Touch ID, Windows Hello, or a security key). Your fingerprint, face, or device PIN never leaves your device and is never sent to us — we only ever see the public half of the key pair.
- The pins you add or import — name, description, category, coordinates, and source link for each place you save, whether typed in by hand or imported from a Google Takeout export you upload.
- A session cookie — keeps you signed in. It's not used for tracking or advertising, and it's marked HttpOnly (readable only by the server, not by any script on the page).
What we don't collect
No ads, no ad trackers, no third-party analytics, no email address, no phone number, no cross-site tracking of any kind.
Who else sees your data
- OpenStreetMap / Nominatim — the free map tiles and place-search service Mapper uses. Searching for a place by name sends that search text to Nominatim's own servers, under their own usage policy.
- DigitalOcean — hosts the server and database.
- Let's Encrypt — issues the certificate that secures this connection.
We don't sell, rent, or otherwise share your data with anyone beyond what's needed to run those pieces of the service.
Public sharing
Your pins are private by default. If you choose to turn on the optional Share feature, anyone who has the link can view a read-only map of your pins — they can't add, edit, or delete anything. You can turn sharing off, or reset the link to invalidate the old one, at any time from the Share button in the app.
Deleting your data
There's no self-service "delete my account" button yet — this is a real limitation, not an oversight we're hiding. If you'd like your account and data removed, contact the operator directly and it will be deleted by hand.
Changes to this policy
If this policy changes in any meaningful way, the date at the top of this page will be updated.