1. Introduction

MapEdit is a free, browser-based map editing tool operated by an individual ("the Operator," "we," "us," or "our") at mapedit.net (the "Service"). This Privacy Policy explains what information we collect when you use the Service and how it is handled. By using the Service, you agree to this Privacy Policy. If you do not agree, please stop using the Service.

MapEdit is provided as a free tool and is operated as a personal project. We are transparent about what we collect and why, but we make no representations about compliance with any specific regulatory framework. If you require guarantees of compliance with GDPR, HIPAA, or any other data protection regulation, you should not use the Service.

2. Information We Collect

2.1 Information You Provide

Account information: Your email address and an encrypted password when you create an account.
Map and project data: Geospatial data, features, layers, styles, and metadata you create, import, or upload.
Sharing settings: Email addresses of invitees and optional share passwords when you share maps.

2.2 Information Collected Automatically

IP address: Logged by our hosting provider (Supabase) and used for rate limiting (e.g., password-attempt throttling).
Cookies and local storage: We use essential cookies and browser local storage to maintain your session, keep you signed in, and remember UI preferences (dark mode, basemap, sidebar state). We do not use advertising cookies or third-party tracking.

2.3 Third-Party Services

The Service sends requests to third-party mapping and routing providers, including OpenStreetMap tile servers, MapTiler, Apple MapKit JS, Nominatim (geocoding), and OSRM (routing). When you search for a location, request directions, or load map tiles, your requests (including coordinates and search queries) go directly to those providers. Their privacy policies apply to that data. We do not control what they collect.

3. How We Use Your Information

Providing the Service: authenticating you, saving your maps, and syncing your projects.
Map sharing: making shared maps accessible to the people you designate.
Security: rate limiting, abuse prevention, and protecting against unauthorized access.
Responding to you if you contact us.

We do not use your data for advertising, profiling, or behavioral targeting. We do not sell, rent, or trade your personal information to anyone.

4. Data Storage and Security

Your data is stored on infrastructure provided by Supabase. Supabase uses encryption at rest and in transit (TLS), row-level security policies, and regular backups. Passwords are hashed (bcrypt) and never stored in plain text.

That said, this is a free service run by one person. While we use reasonable technical safeguards, no system is perfectly secure. We cannot and do not guarantee the security of your data. Do not store sensitive, confidential, or regulated data in MapEdit. You use the Service at your own risk.

5. Data Sharing and Disclosure

We do not sell your data. We may disclose information only in these circumstances:

Infrastructure providers: Supabase hosts our database. Mapping tile providers receive tile requests. These services process data as needed to deliver the Service.
Map sharing: When you share a map, its content is accessible to recipients at the access level you configured (public, email-restricted, or password-protected). Your account credentials are never shared.
Legal requirements: If required by law, court order, or governmental request.

6. Data Retention and Deletion

We keep your account and project data for as long as your account exists. If you delete your account, your data will be removed from our active database. Residual copies may persist in backups for a limited period managed by our infrastructure provider. We do not commit to a specific deletion timeline.

7. Your Data, Your Responsibility

You can export your map data at any time using our built-in export tools (GeoJSON, KML, CSV, Shapefile). We encourage you to keep local backups of any data you consider important. We are not responsible for data loss.

If you want your account and data deleted, you can delete your account through the Service's settings, or contact us and we will do our best to accommodate your request in a reasonable timeframe.

8. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children. If you believe a child has created an account, please contact us and we will delete it.

9. International Users

The Service is hosted in the United States. If you access the Service from outside the United States, your data will be transferred to and processed in the United States or other countries where our infrastructure providers operate. By using the Service, you consent to this transfer. We do not guarantee compliance with the data protection laws of your jurisdiction.

10. Changes to This Policy

We may update this Privacy Policy at any time. Changes take effect when posted to this page. The "Last updated" date at the top reflects the most recent revision. Your continued use of the Service after changes are posted constitutes acceptance.

11. Contact

If you have questions about this Privacy Policy or want to request account deletion, contact:

MapEdit
Email: tannertunstall@gmail.com