Privacy

What stays on your device

Everything you draw — painted tiles, lines, symbols, saved slots — is held in your browser's own storage. It never leaves your device unless you save it to a file and share it yourself. Clearing your browser data deletes it, and we cannot recover it.

Map data (tiles, layers) is downloaded once and cached in your browser so that a second visit does not download it again.

What we can see

• Server logs. Our host records requests — IP address, time, the file requested, browser type. This is ordinary web-server operation and is used to keep the site running and to spot abuse.
• Choices you make on the front page. Your language and map choice are stored in your browser so we can send you back to the same map. They are not sent to us.

Advertising

Some pages carry advertising. Google, as a third-party vendor, uses cookies to serve ads on this site. Google's use of advertising cookies lets it and its partners serve ads based on your visit to this site and to other sites on the internet.

You can turn off personalised advertising at any time in Google Ads Settings, or opt out of third-party vendors' cookies at aboutads.info. Where the law requires it, you will be asked for consent before any of this happens, and you can withdraw it at any time.

We never receive your name, email address or any other identifying detail from the advertising — only aggregate counts.

The discussion board

The board is open. It sits below each map and stores what you post — that means the name you type (optional), the text of your message, and the time. It is public — anyone can read it.

We also store a one-way hash of your IP address, salted with a secret. It is used only to slow down flooding and to enforce a daily posting limit. It cannot be turned back into an IP address, it is never shown to other readers, and the rate-limit records expire on their own.

The IP fragment beside your name. If you leave the name box empty your post is shown as ㅇㅇ, and the first two parts of your IP address (for example 118.235) appear next to it. The remaining parts are never stored. This lets readers notice when one person posts under several names; the fragment cannot be turned back into a full IP address.

Post passwords. If you set a password when posting or replying, you can delete that post yourself later. The password itself is not stored — only a hash that is salted differently for every post. Without one, only we can remove the post.

Signing in with Google. Signing in is optional. The only scope we ask Google for is openid, so we receive no email address, no name and no profile picture. The account number Google gives us is never stored as-is — we keep only a salted hash of it. What we hold is that value, the nickname you choose, and the date you joined. Your signed-in state is kept in your browser's own storage rather than in a cookie, and signing out removes it.

Closing your account. You may close it at any time, which deletes the value above and your nickname. Posts you already made remain, because they are part of other people's conversations. If you want those gone too, delete them before closing the account, or write to the address below.

You may attach one photo to a post. Your browser shrinks it and re-encodes it before it is sent, which removes the camera data embedded in the file — including any GPS location. Only the shrunk image is uploaded, and it is public. Posting does not require an account.

To have a post removed, use the contact address below and say which post. We may also remove posts that are spam or abusive.

Your rights

Depending on where you live, you may have the right to ask what we hold about you, to have it corrected or deleted, and to complain to a supervisory authority. Contact us and we will answer.

Changes

If this policy changes in a way that matters, the date above changes and the change is noted on the front page.