Privacy Policy

What we collect

Maptide is a web-based tool for creating map overlays, with an account system, paid subscriptions, and a curated icon library. Depending on how you use Maptide, we collect: the email address Clerk stores when you create an account; account and session identifiers, and your subscription/tier status; if you subscribe, identifiers for your subscription and transactions, and, only if needed to match a payment to your account, a billing email from Paddle (we never receive or store your card details; that's handled entirely by our payment processor, Paddle); access logs tied to your account, including your IP address and browser user-agent, used to enforce our icon-license terms, and separate rate-limiting counters keyed to your account used to prevent abuse of certain endpoints (see Terms of Service); error diagnostics if something goes wrong in the app; and anonymized page-view analytics via Vercel Analytics (pages visited, referrers, device type). Vercel Analytics doesn't use cookies and doesn't track you across other sites.

How we use it

We use this data to operate your account and the map editor; process subscription payments and manage your billing relationship; detect and enforce violations of our icon-license terms; diagnose and fix errors in the service; and understand aggregate site usage. We don't sell your data or share it with anyone except the processors listed below, each of which handles it only to provide their part of the service.

Who processes it

We work with the following processors, each handling a specific part of the service on our behalf:

• Clerk: account creation, sign-in, and session management. Clerk stores your email address and account credentials.
• Paddle: our payment processor and merchant of record for subscriptions. Paddle handles checkout, billing, and payment data; we never receive or store your card details.
• Sentry: error monitoring. We configure Sentry not to collect personal data by default and strip request URLs, headers, and cookies before anything is sent; it typically only receives error messages and stack traces.
• Upstash: stores an access/audit log (IP address, user-agent, action taken) used to enforce the icon-license terms described in our Terms of Service, and separately, rate-limiting counters keyed to your account ID used to prevent abuse of certain endpoints.
• Vercel: hosts our servers and edge functions, and provides cookie-less Web Analytics for aggregate site traffic.
• Google: if you view the map, your browser loads map tiles directly from Google Maps to display the map you're editing; that request reaches Google independent of Maptide, and we don't see or store it. See Google's terms of service.

See our Terms of Service for additional usage policies. If you are located in the EEA/UK, your data may be transferred to and processed in the United States by these processors, each of which maintains appropriate safeguards for international transfers (e.g., Standard Contractual Clauses). Our lawful basis for processing is performance of our contract with you (operating your account and subscription) and our legitimate interest in keeping the service secure and preventing abuse of the icon library.

Cookies

Maptide uses one essential cookie: Clerk's session cookie, set when you sign in, which keeps you signed in and can't be disabled without breaking sign-in. When you subscribe, you're redirected to Paddle's own hosted checkout page to complete payment. Any cookies set during that step are set on Paddle's domain under Paddle's own privacy policy, not by Maptide. We don't use advertising or cross-site tracking cookies. As noted above, Vercel Analytics doesn't use cookies at all.

Unsubscribe or delete your data

If you have a Maptide account, email us to request deletion: we'll cancel any active subscription and delete your account within 30 days. Reach us at maptide.app@gmail.com.

Data Retention

We retain data only as long as it's needed for the purpose it was collected. Account data is kept for as long as your account is active, and deleted within 30 days of a deletion request. Billing records are governed by Paddle's own retention policies as merchant of record. Access/audit logs are automatically deleted after approximately 800 days. Error diagnostics are retained per Sentry's default retention period, which we don't independently extend.

Your Rights

Depending on where you live, you may have the right to access, correct, or delete your personal data. You may also have the right to object to our processing or request portability of your data. To exercise any of these rights, email maptide.app@gmail.com. If you believe your rights have been violated, you may also have the right to lodge a complaint with your local data-protection authority.

Children's Privacy

Maptide is not directed to children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us data, contact us at maptide.app@gmail.com and we'll delete it.

Contact

Questions about this policy? Email maptide.app@gmail.com.