Privacy policy

Who we are

the operator of Glademap is the data controller for account data and the processor for the content a venue publishes. Contact us at [email protected].

Visitors to a published map

If you open a venue's map as a visitor, we do not ask you to sign in and we do not create an account for you.

• Your location never reaches us. When you allow location access, your browser gives your coordinates to the page running on your own device, which draws the dot on the map locally. Those coordinates are not transmitted to our servers, not stored, and not logged. There is no step in the code where we could intercept them even if we wanted to.
• No tracking cookies. The visitor map sets no cookies and contains no analytics, advertising or third-party tracking scripts. Because of this, no cookie consent banner is required to use it.
• No visitor profiles. We do not build individual visitor profiles or movement heatmaps. This is a design decision, not a gap we intend to close later.
• Map imagery. Map tiles are fetched from third-party providers (Esri and OpenFreeMap), which necessarily see your device's IP address in order to serve them, as with any image loaded from another site.

Venue staff accounts

For people who sign in to manage a venue, we store their name and email address, a securely scrambled version of their password (never the password itself), and a record of when and where they signed in — including IP address and device/browser details — so they can see and manage their own active sign-ins and we can help keep accounts secure.

These cookies are strictly necessary to keep you signed in, which is why they do not require consent.

Content a venue publishes

Points of interest, categories, descriptions, photos and boundaries belong to the venue that created them. We store and serve them on that venue's behalf. Published content is public by design — anyone with the link can see it, and search engines may index it. Unpublished drafts are not shown on the public map.

Where data is stored

Venue data and uploaded photos are hosted in the European Union.

How long we keep it

Account and venue data is kept while the account is active. When a venue is deleted its public map stops serving immediately; the underlying records are retained for a recovery period before permanent deletion. Backups are retained on a rolling schedule and expire automatically.

Your rights

Under the GDPR you can request access to your personal data, correction, erasure, a portable copy, or restriction of processing, and you can object to processing. Write to [email protected] and we will respond within one month. You also have the right to complain to your national data protection authority.

Account details, including deleting the account itself, can be changed from your account settings. Deletion is blocked while you're the sole owner of a venue — promote another owner or delete that venue first — otherwise it takes effect immediately.

Changes

If this policy changes materially we will publish the updated version here with a new date and show a notice in the editor before the change takes effect.