Privacy policy

Effective 16 September 2026. These pages are a practical launch template and should be reviewed by a qualified UK legal adviser before paid advertising or unrestricted public uploads are enabled.

Information we process

We process account name, email address, password hash, login/session information, map profiles, uploaded images, alignment data, field notes, sharing permissions, suggestions, contact messages and supporter status. GPS location is processed only when you use a location feature.

Why we process it

We use this information to provide accounts and maps, secure the service, apply permissions, operate public submissions, answer enquiries, prevent abuse, understand faults and meet legal obligations. Advertising or analytics requiring non-essential storage will not load until the required consent is obtained.

Sharing and processors

Public profiles and their selected metadata are visible to anyone. Unlisted maps are visible to people holding the link. Authorised site administrators can inspect and manage uploaded content, including private profiles, for support, moderation, security and service operation. Administrative changes made after the activity-log update are recorded. Hosting, email, map-tile, payment, error-monitoring and AI providers may process limited information on our behalf under their own safeguards. OpenAI-assisted archive searches send the search request and relevant image or location information, not your password.

Optional sponsor banners

Direct sponsor banners are optional and are not shown to supporters or administrators. Before a sponsor image loads, you can choose Allow banners or No thanks. Images may be hosted by the sponsor and their host may receive your IP address. Banner links open the sponsor’s site. This banner feature does not add advertising scripts or tracking cookies. You can reset your choice in Your account → Banner preferences.

Retention and your choices

Account content is retained while the account is active and for a limited backup or recovery period after deletion. Security logs and legal records may be kept longer where necessary. You may request access, correction, export or deletion through the contact page. You can withdraw public publication without deleting your private working copy.

Security

We use access controls, password hashing, CSRF protection, upload validation and rate limits. No online service can guarantee absolute security; please report suspected account compromise promptly.