Privacy
We keep as little as we can. No passwords, no payment data, no ads, no tracking. You can download everything we have about you, or delete your account, from your account page.
Who's responsible
Bruno Carvalho, Canada runs The Map of Projects and is responsible for your data. Contact: bruno@poweredbycode.com.br.
Visiting without an account
Looking at the map sets no cookies and stores nothing about you on our side. Your browser remembers two map settings (which part of the world to center on, and From or Based in) in its own storage; they never leave it. Like any website, our hosting sees your IP address with each request. It's kept in server logs for up to 30 days to keep the site running and stop abuse. To limit floods, we count requests per address under a one-way hash of the address and the day, which can't be turned back into the address. Each count expires after two hours.
With an account
| What | Why | How long |
|---|---|---|
| Your name and picture from GitHub or Google | To show who made a project (only the maker name you choose is public) | Until you delete your account |
| Your email address, from GitHub or Google | To tell you when your submission is approved or turned down, or your project goes offline; and, only if you turn it on, the weekly email. Never shown, never shared | Until you delete your account |
| Your votes and saved projects | To count votes and keep your list. Who voted for or saved what is never shown; makers see only totals | Until you remove them or delete your account |
| Your projects, drafts and images | To list them on the map | Until you delete them; drafts untouched for 30 days are deleted |
| Updates you post on your projects | To show them on the project's page and send them to the people who saved it | Until you delete the project or your account |
| Whether you get the weekly email, and when you last opened your Saved list | To send it (off unless you turn it on; every email has a one-click link to stop it) and to mark what's new | Until you delete your account |
| Reports you send | So the curator can review them | Until you delete your account |
One cookie, __session | Keeps you signed in. Strictly necessary, so there's no banner | 14 days, or until you sign out |
The legal basis is the service you asked for (your account, projects and votes) and our legitimate interest in keeping the site safe (logs, rate limits, bot checks).
Who else handles it
- Google Cloud / Firebase (United States): hosting, database, file storage and sign-in.
- GitHub or Google: whichever you sign in with confirms who you are.
- Google reCAPTCHA: only when you start a submission or send a report, to check you're not a bot.
- Resend (United States): sends the emails about your submissions, and the weekly email if you turned it on.
Transfers to the United States rely on the providers' standard contractual clauses. We don't sell or share your data with anyone else.
Your rights
You can see, download, correct and delete your data. Download and delete are on your account page. Edit your projects from your projects. Deleting your account removes your votes, saves, reports, projects and images at once. Backups age out within 14 days. You can also object to how we use your data, or complain to your data protection authority. For anything else, write to bruno@poweredbycode.com.br.